RedHat Update for vim RHSA-2016:2972-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 / 7 : vim (RHSA-2016:2972)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:2972 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: A vulnerability was found in vim in how certain modeline...

vim security update

7.4.629-5.1 - add fix for CVE-2016-1248...

Important: vim

Issue Overview: A vulnerability was found in vim in how certain modeline options were treated. An attacker could craft a file that, when opened in vim with modelines enabled, could execute arbitrary commands with privileges of the user running vim. modelines are disabled by default for root, and...

openSUSE Security Update : vim (openSUSE-2016-1390)

This update for vim fixes the following security issues : - Fixed CVE-2016-1248 an arbitrary command execution vulnerability bsc1010685 This update for vim fixes the following issues : - Fix build with Python 3.5. bsc988903 This update was imported from the SUSE:SLE-12:Update update project...

openSUSE Security Update : vim (openSUSE-2016-1391)

This update for vim fixes the following security issues : - Fixed CVE-2016-1248 an arbitrary command execution vulnerability bsc1010685 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Security update for vim (important)

This update for vim fixes the following security issues: - Fixed CVE-2016-1248 an arbitrary command execution vulnerability bsc1010685 This update for vim fixes the following issues: - Fix build with Python 3.5. bsc988903 This update was imported from the SUSE:SLE-12:Update update project...

SUSE-SU-2016:2938-1 Security update for vim

This update for vim fixes the following security issues: - Fixed CVE-2016-1248, an arbitrary command execution vulnerability bsc1010685...

SUSE SLED12 / SLES12 Security Update : vim (SUSE-SU-2016:2942-1)

This update for vim fixes the following security issues : - Fixed CVE-2016-1248 an arbitrary command execution vulnerability bsc1010685 This update for vim fixes the following issues : - Fix build with Python 3.5. bsc988903 Note that Tenable Network Security has extracted the preceding descriptio...

SUSE SLES11 Security Update : vim (SUSE-SU-2016:2938-1)

This update for vim fixes the following security issues : - Fixed CVE-2016-1248, an arbitrary command execution vulnerability bsc1010685 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automaticall...

CVE-2016-1248

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened...

CVE-2016-1248

Vim CVE-2016-1248 is a modeline input-validation vulnerability in which values for the 'filetype', 'syntax', and 'keymap' options could be exploited to execute arbitrary commands when a user opens a file containing a crafted modeline. Affected Vim versions could be compromised, and Neovim is also...

CVE-2016-1248

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened...

[SECURITY] [DSA 3722-1] vim security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3722-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 22, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3722-1 (vim - security update)

Florian Larysch and Bram Moolenaar discovered that vim, an enhanced vi editor, does not properly validate values for the the filetype, syntax and keymap options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened. OpenVAS Vulnerability Test...

Debian DSA-3238-1 : chromium-browser - security update

Several vulnerabilities were discovered in the chromium web browser. - CVE-2015-1235 A Same Origin Policy bypass issue was discovered in the HTML parser. - CVE-2015-1236 Amitay Dobo discovered a Same Origin Policy bypass in the Web Audio API. - CVE-2015-1237 Khalil Zhani discovered a use-after-fr...

FreeBSD : chromium -- multiple vulnerabilities (b57f690e-ecc9-11e4-876c-00262d5ed8ee)

Google Chrome Releases reports : 45 new security fixes, including : - 456518 High CVE-2015-1235: Cross-origin-bypass in HTML parser. Credit to anonymous. - 313939 Medium CVE-2015-1236: Cross-origin-bypass in Blink. Credit to Amitay Dobo. - 461191 High CVE-2015-1237: Use-after-free in IPC. Credit ...

CVE-2015-1248

CVE-2015-1248 affects Google Chrome's FileSystem API prior to 40.0.2214.91, enabling a SafeBrowsing bypass by placing an .exe in a temporary filesystem and referencing it via a filesystem:http: URL. The issue is referenced in multiple advisories (Debian DSA-3238-1, Gentoo GLSA-201506-04, CNVD-201...

CVE-2015-1248

Removed by vendor...

CVE-2015-1248: Undefined Security Weakness

The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL...