vim -- arbitrary command execution

2016-11-22T00:00:00
ID C11629D3-C8AD-11E6-AE1B-002590263BF5
Type freebsd
Reporter FreeBSD
Modified 2016-11-22T00:00:00

Description

Mitre reports:

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.