Red Hat Security Advisory

RHSA-2007:0346

vim security update

Released 2007-05-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) vim-2:7.0.109-3.el5.3, vim-X11-2:7.0.109-3.el5.3, vim-X11-2:7.0.109-3.el5.3.i386 +14
Red Hat Enterprise Linux Desktop (v. 5 client) vim-2:7.0.109-3.el5.3, vim-X11-2:7.0.109-3.el5.3, vim-X11-2:7.0.109-3.el5.3.i386 +6

Fixes 1 record

TI-2007-02354 CVE-2007-2438 · GHSA-x2f5-352x-j9w7

The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and…

LOW 39

The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.03221 Published 2007-05-02 Fixed