CVE-2007-2438

CVE-2007-2438 targets Vim’s sandbox, where modeline parsing grants access to dangerous functions (writefile, feedkeys, system), enabling user-assisted execution of shell commands and file writes. The issue affects Vim components exposed to modelines and has been addressed in multiple advisories a...

CVE-2007-2953

CVE-2007-2953 is a format-string vulnerability in Vim’s helptags processor (helptags_one in src/ex_cmds.c) that allowed remote code execution when a user processed a crafted help file tag. Affected are Vim 6.4 and earlier and 7.x up to 7.1; the issue arises from format string specifiers being int...