gvim: multiple vulnerabilities [LWN.net]

Package(s):

gvim

CVE #(s):

CVE-2008-3074 CVE-2008-3075 CVE-2008-3076

Created:

November 24, 2008

Updated:

March 24, 2009

Description:

From the rPath advisory:

Previous versions of the vim package contain multiple vulnerabilities, the most serious of which allow user-assisted attackers to execute arbitrary commands via maliciously crafted file and directory names.

Alerts:

SuSE	SUSE-SR:2009:007	2009-03-24
Debian	DSA-1733	2009-03-03
Mandriva	MDVSA-2008:236-1	2008-12-08
Mandriva	MDVSA-2008:236	2008-12-03
CentOS	CESA-2008:0580	2008-11-26
Red Hat	RHSA-2008:0580-01	2008-11-25
rPath	rPSA-2008-0324-1	2008-11-22

(Log in to post comments)