GVim may insecurely load dynamic libraries

Overview GVim may use unsafe methods for determining how to load DLLs. GVim is a text editor. GVim loads certain DLL's when TXT files are opened. GVim contains an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. Makoto Shiotsuki reported this vulnerability t...

JVN#27868039: GVim may insecurely load dynamic libraries

GVim is a text editor. GVim loads certain DLL's when TXT files are opened. GVim contains an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. Impact An attacker may execute arbitrary code with the privilege of running the application. Solution Update the...

SLES10: Security update for gvim and vim

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gvim vim More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

SLES10: Security update for vim

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gvim vim More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009...

SLES10: Security update for vim

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gvim vim More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

SLES10: Security update for gvim and vim

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gvim vim More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009...

SLES9: Security update for vim and gvim

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: vim gvim For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017978 within the Su...

SLES9: Security update for ViM

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gvim vim For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5044520 within the Su...

SLES9: Security update for gvim and vim

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gvim vim More details may also be found by searching for keyword 5021877 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for gvim and vim

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gvim vim More details may also be found by searching for keyword 5021877 within the SuSE Enterprise Server 9 patch database linked in the references...

SLES9: Security update for vim and gvim

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: vim gvim For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017978 within the Su...

SuSE9 Security Update : vim and gvim (YOU Patch Number 11722)

This update of Vim addresses a format-string bug in 'helptags'. This bug can be exploited to execute code with the privileges of the user running Vim. CVE-2007-2953 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

openSUSE Security Update : gvim (gvim-561)

The VI Improved editor vim was updated to version 7.2.108 to fix various security problems and other bugs. CVE-2008-4677: The netrw plugin sent credentials to all servers. CVE-2009-0316: The python support used a search path including the current directory, allowing code injection when python cod...

openSUSE Security Update : gvim (gvim-561)

The VI Improved editor vim was updated to version 7.2.108 to fix various security problems and other bugs. CVE-2008-4677: The netrw plugin sent credentials to all servers. CVE-2009-0316: The python support used a search path including the current directory, allowing code injection when python cod...

openSUSE 10 Security Update : gvim (gvim-6023)

The VI Improved editor vim was updated to version 7.2.108 to fix various security problems and other bugs. CVE-2008-4677: The netrw plugin sent credentials to all servers. CVE-2009-0316: The python support used a search path including the current directory, allowing code injection when python cod...

openSUSE 10 Security Update : gvim (gvim-4822)

Vim allows to open content via external programs if the argument contains a 'http:' sub-string. It insecurely invoked external web browsers to fetch the remote content. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 10 Security Update : gvim and vim (ZYPP Patch Number 4821)

Vim allows to open content via external programs if the argument contains a 'http:' sub-string. It insecurely invoked external web browsers to fetch the remote content. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : vim and gvim (ZYPP Patch Number 4095)

This update of Vim addresses a format-string bug in 'helptags'. This bug can be exploited to execute code with the privileges of the user running Vim. CVE-2007-2953 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

openSUSE 10 Security Update : gvim (gvim-4092)

This update of Vim addresses a format-string bug in 'helptags'. This bug can be exploited to execute code with the privileges of the user running Vim. CVE-2007-2953 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

security flaw

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as 1 termcap, 2 printdevice, 3 titleold, 4 filetype, 5 syntax, 6 backupext, 7 keymap, 8 patchmode, or 9 langmenu...