Lucene search

K
freebsdFreeBSD30866E6C-3C6D-11DD-98C9-00163E000016
HistoryJun 16, 2008 - 12:00 a.m.

vim -- Vim Shell Command Injection Vulnerabilities

2008-06-1600:00:00
vuxml.freebsd.org
13

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.0%

Rdancer.org reports:

Improper quoting in some parts of Vim written in the Vim Script
can lead to arbitrary code execution upon opening a crafted
file.

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.0%