Red Hat Security AdvisoryRHSA-2008:0617
vim security update
Released 2008-11-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 vim-1:6.3.046-0.30E.11, vim-X11-1:6.3.046-0.30E.11, vim-X11-1:6.3.046-0.30E.11.i386 +6
- Red Hat Enterprise Linux AS version 3 vim-1:6.3.046-0.30E.11, vim-X11-1:6.3.046-0.30E.11, vim-X11-1:6.3.046-0.30E.11.i386 +14
- Red Hat Enterprise Linux AS version 4 vim-1:6.3.046-1.el4_7.5z, vim-X11-1:6.3.046-1.el4_7.5z, vim-X11-1:6.3.046-1.el4_7.5z.i386 +14
- Red Hat Enterprise Linux Desktop version 4 vim-1:6.3.046-1.el4_7.5z, vim-X11-1:6.3.046-1.el4_7.5z, vim-X11-1:6.3.046-1.el4_7.5z.i386 +6
- Red Hat Enterprise Linux ES version 3 vim-1:6.3.046-0.30E.11, vim-X11-1:6.3.046-0.30E.11, vim-X11-1:6.3.046-0.30E.11.i386 +10
- Red Hat Enterprise Linux ES version 4 vim-1:6.3.046-1.el4_7.5z, vim-X11-1:6.3.046-1.el4_7.5z, vim-X11-1:6.3.046-1.el4_7.5z.i386 +10
- Red Hat Enterprise Linux WS version 3 vim-1:6.3.046-0.30E.11, vim-X11-1:6.3.046-0.30E.11, vim-X11-1:6.3.046-0.30E.11.i386 +10
- Red Hat Enterprise Linux WS version 4 vim-1:6.3.046-1.el4_7.5z, vim-X11-1:6.3.046-1.el4_7.5z, vim-X11-1:6.3.046-1.el4_7.5z.i386 +10
Fixes 4 records
Priority MEDIUM 56
Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrat…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.15044 · Published 2008-06-16 · Fixed CWE-20
Priority MEDIUM 52
Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" (semicolon) fol…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.09207 · Published 2008-09-18 · Fixed CWE-20
Priority MEDIUM 41
Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0862 · Published 2008-10-10 · Fixed CWE-119
Priority LOW 37
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04179 · Published 2007-07-31 · Fixed
THREATIST.IORead the docs