Advertisement
Front, Kernel, Security, Distributions, Development. See your byline here on LWN.net.
| |||||||||||||
|
| |||||||||||||
vim - modeline vulnerabilityvim - modeline vulnerabilityPosted Mar 4, 2004 0:44 UTC (Thu) by dw (subscriber, #12017)Parent article: vim - modeline vulnerability The initial Guninski advisory was so rushed that he failed to notice "libcallnr" as an alternative to "libcall". Upon return of "libcall", vim will attempt to read a char * from the integer returned by the called function. This, in the case of the advisory, should for all intents and purposes lead to a crash. Just worth note. :)
(Log in to post comments)
|
|
||||||||||||