Lucene search

K
nvd[email protected]NVD:CVE-2007-2953
HistoryJul 31, 2007 - 10:17 a.m.

CVE-2007-2953

2007-07-3110:17:00
web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.278 Low

EPSS

Percentile

96.8%

Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.

Affected configurations

NVD
Node
vim_development_groupvimRange≀6.4
OR
vim_development_groupvimMatch7.0
OR
vim_development_groupvimMatch7.1
OR
vim_development_groupvimMatch7.1.38

References

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.278 Low

EPSS

Percentile

96.8%