vim: arbitrary command execution
| Package(s): | vim | CVE #(s): | CAN-2005-2368 | ||||||||||||||||||||||||
| Created: | July 26, 2005 | Updated: | August 23, 2005 | ||||||||||||||||||||||||
| Description: | Georgi Guninski discovered that it was possible to construct Vim 6.3 modelines that execute arbitrary shell commands by wrapping them in glob() or expand() function calls. If an attacker tricked an user to open a file with a specially crafted modeline, he could exploit this to execute arbitrary commands with the user's privileges. | ||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||