This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Detail
Vendor Vim First view 2008-09-18
Product Vim Last view 2020-05-28
Version 7.2a.10 Type Application
Update *  
Edition *  
Language *  
Sofware Edition *  
Target Software *  
Target Hardware *  
Other *  
 
CPE Product cpe:2.3:a:vim:vim

Activity : Overall

Related : CVE

  Date Alert Description
5.3 2020-05-28 CVE-2019-20807

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).

7.8 2019-12-30 CVE-2019-20079

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.

8.6 2019-06-05 CVE-2019-12735

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim.

5.5 2017-12-01 CVE-2017-17087

fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability than CVE-2017-1000382.

5.5 2017-10-31 CVE-2017-1000382

VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary.

9.8 2017-02-27 CVE-2017-6350

An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

9.8 2017-02-27 CVE-2017-6349

An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

9.8 2017-02-10 CVE-2017-5953

vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.

7.8 2016-11-23 CVE-2016-1248

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.

9.3 2009-02-21 CVE-2008-3076

The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames used by the execute and system functions within the (1) mz and (2) mc commands, as demonstrated by the netrw.v2 and netrw.v3 test cases. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712.

9.3 2009-02-21 CVE-2008-3075

The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a ZIP archive and possibly (2) the filename of the first file in a ZIP archive, which is not properly handled by zip.vim in the VIM ZIP plugin (zipPlugin.vim) v.11 through v.21, as demonstrated by the zipplugin and zipplugin.v2 test cases. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712. NOTE: this issue has the same root cause as CVE-2008-3074. NOTE: due to the complexity of the associated disclosures and the incomplete information related to them, there may be inaccuracies in this CVE description and in external mappings to this identifier.

6.9 2009-01-28 CVE-2009-0316

Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.

9.3 2008-09-18 CVE-2008-4101

Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) "Ctrl-]" (control close-square-bracket) or (3) "g]" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.

CWE : Common Weakness Enumeration

%idName
25% (3) CWE-190 Integer Overflow or Wraparound
25% (3) CWE-78 Improper Sanitization of Special Elements used in an OS Command ('O...
16% (2) CWE-200 Information Exposure
16% (2) CWE-20 Improper Input Validation
8% (1) CWE-416 Use After Free
8% (1) CWE-94 Failure to Control Generation of Code ('Code Injection')

Open Source Vulnerability Database (OSVDB)

id Description
53373 Python PySys_SetArgv API Function Search Path Subversion Local Privilege Esca...
52162 Vim ZIP Plugin (zipPlugin.vim) shellescape Function Filename Handling Arbitra...
52161 Vim Netrw Plugin (netrw.vim) mc / mz Command Filename Handling Arbitrary Code...
51437 Vim Character Escaping Weakness Arbitrary Command Execution

OpenVAS Exploits

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
id Description
2010-05-12 Name : Mac OS X 10.6.3 Update / Mac OS X Security Update 2010-002
File : nvt/macosx_upd_10_6_3_secupd_2010-002.nasl
2010-05-12 Name : Mac OS X Security Update 2008-007
File : nvt/macosx_secupd_2008-007.nasl
2009-11-17 Name : Mac OS X Version
File : nvt/macosx_version.nasl
2009-10-13 Name : SLES10: Security update for vim
File : nvt/sles10_gvim.nasl
2009-10-10 Name : SLES9: Security update for ViM
File : nvt/sles9p5044520.nasl
2009-06-05 Name : Ubuntu USN-723-1 (git-core)
File : nvt/ubuntu_723_1.nasl
2009-04-09 Name : Mandriva Update for vim MDVSA-2008:236-1 (vim)
File : nvt/gb_mandriva_MDVSA_2008_236_1.nasl
2009-04-09 Name : Mandriva Update for vim MDVSA-2008:236 (vim)
File : nvt/gb_mandriva_MDVSA_2008_236.nasl
2009-03-31 Name : SuSE Security Summary SUSE-SR:2009:007
File : nvt/suse_sr_2009_007.nasl
2009-03-07 Name : Debian Security Advisory DSA 1733-1 (vim)
File : nvt/deb_1733_1.nasl
2009-03-06 Name : RedHat Update for vim RHSA-2008:0580-01
File : nvt/gb_RHSA-2008_0580-01_vim.nasl
2009-03-06 Name : RedHat Update for vim RHSA-2008:0618-01
File : nvt/gb_RHSA-2008_0618-01_vim.nasl
2009-03-06 Name : RedHat Update for vim RHSA-2008:0617-01
File : nvt/gb_RHSA-2008_0617-01_vim.nasl
2009-03-02 Name : Mandrake Security Advisory MDVSA-2009:047-1 (vim)
File : nvt/mdksa_2009_047_1.nasl
2009-02-27 Name : CentOS Update for vim-common CESA-2008:0617 centos4 x86_64
File : nvt/gb_CESA-2008_0617_vim-common_centos4_x86_64.nasl
2009-02-27 Name : CentOS Update for vim-common CESA-2008:0617 centos4 i386
File : nvt/gb_CESA-2008_0617_vim-common_centos4_i386.nasl
2009-02-27 Name : CentOS Update for vim-common CESA-2008:0617 centos3 x86_64
File : nvt/gb_CESA-2008_0617_vim-common_centos3_x86_64.nasl
2009-02-27 Name : CentOS Update for vim-common CESA-2008:0617 centos3 i386
File : nvt/gb_CESA-2008_0617_vim-common_centos3_i386.nasl
2009-02-27 Name : CentOS Update for vim CESA-2008:0618-01 centos2 i386
File : nvt/gb_CESA-2008_0618-01_vim_centos2_i386.nasl
2009-02-23 Name : Mandrake Security Advisory MDVSA-2009:047 (vim)
File : nvt/mdksa_2009_047.nasl
2009-02-02 Name : Ubuntu USN-710-1 (xine-lib)
File : nvt/ubuntu_710_1.nasl
2009-02-02 Name : Ubuntu USN-711-1 (ktorrent)
File : nvt/ubuntu_711_1.nasl
2009-02-02 Name : Ubuntu USN-712-1 (vim)
File : nvt/ubuntu_712_1.nasl
2009-01-02 Name : FreeBSD Ports: vim, vim-lite, vim-gtk2, vim-gnome
File : nvt/freebsd_vim3.nasl
2008-12-02 Name : Vim Shell Command Injection Vulnerability (Linux)
File : nvt/secpod_vim_shell_cmd_injection_vuln_lin_900412.nasl

Snort® IPS/IDS

Date Description
2017-08-08 Vim modelines remote command execution attempt
RuleID : 43482 - Type : FILE-OTHER - Revision : 3
2017-08-08 Vim modelines remote command execution attempt
RuleID : 43481 - Type : FILE-OTHER - Revision : 3

Nessus® Vulnerability Scanner

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
id Description
2018-08-17 Name: The remote PhotonOS host is missing multiple security updates.
File: PhotonOS_PHSA-2018-2_0-0076.nasl - Type: ACT_GATHER_INFO
2018-08-17 Name: The remote PhotonOS host is missing multiple security updates.
File: PhotonOS_PHSA-2018-2_0-0070.nasl - Type: ACT_GATHER_INFO
2018-08-17 Name: The remote PhotonOS host is missing multiple security updates.
File: PhotonOS_PHSA-2018-1_0-0167.nasl - Type: ACT_GATHER_INFO
2018-08-17 Name: The remote PhotonOS host is missing multiple security updates.
File: PhotonOS_PHSA-2017-0007.nasl - Type: ACT_GATHER_INFO
2018-08-17 Name: The remote PhotonOS host is missing multiple security updates.
File: PhotonOS_PHSA-2017-0006.nasl - Type: ACT_GATHER_INFO
2018-08-17 Name: The remote PhotonOS host is missing multiple security updates.
File: PhotonOS_PHSA-2016-0012.nasl - Type: ACT_GATHER_INFO
2018-06-28 Name: The remote EulerOS host is missing a security update.
File: EulerOS_SA-2018-1171.nasl - Type: ACT_GATHER_INFO
2017-11-01 Name: The remote device is missing a vendor-supplied security patch.
File: f5_bigip_SOL22183127.nasl - Type: ACT_GATHER_INFO
2017-08-08 Name: The remote EulerOS host is missing a security update.
File: EulerOS_SA-2017-1149.nasl - Type: ACT_GATHER_INFO
2017-08-08 Name: The remote EulerOS host is missing a security update.
File: EulerOS_SA-2017-1148.nasl - Type: ACT_GATHER_INFO
2017-07-07 Name: The remote openSUSE host is missing a security update.
File: openSUSE-2017-788.nasl - Type: ACT_GATHER_INFO
2017-07-05 Name: The remote SUSE host is missing one or more security updates.
File: suse_SU-2017-1775-1.nasl - Type: ACT_GATHER_INFO
2017-06-29 Name: The remote SUSE host is missing one or more security updates.
File: suse_SU-2017-1712-1.nasl - Type: ACT_GATHER_INFO
2017-06-23 Name: The remote Gentoo host is missing one or more security-related patches.
File: gentoo_GLSA-201706-26.nasl - Type: ACT_GATHER_INFO
2017-05-01 Name: The remote EulerOS host is missing multiple security updates.
File: EulerOS_SA-2017-1033.nasl - Type: ACT_GATHER_INFO
2017-05-01 Name: The remote EulerOS host is missing multiple security updates.
File: EulerOS_SA-2017-1034.nasl - Type: ACT_GATHER_INFO
2017-03-30 Name: The remote Amazon Linux AMI host is missing a security update.
File: ala_ALAS-2017-809.nasl - Type: ACT_GATHER_INFO
2017-03-10 Name: The remote Debian host is missing a security update.
File: debian_DLA-850.nasl - Type: ACT_GATHER_INFO
2017-03-06 Name: The remote Fedora host is missing a security update.
File: fedora_2017-e9171a0c00.nasl - Type: ACT_GATHER_INFO
2017-03-03 Name: The remote Fedora host is missing a security update.
File: fedora_2017-8494d0142c.nasl - Type: ACT_GATHER_INFO
2017-02-28 Name: The remote Fedora host is missing a security update.
File: fedora_2017-9b2cf468d5.nasl - Type: ACT_GATHER_INFO
2017-02-21 Name: The remote openSUSE host is missing a security update.
File: openSUSE-2017-280.nasl - Type: ACT_GATHER_INFO
2017-02-15 Name: The remote Fedora host is missing a security update.
File: fedora_2017-595fec72ef.nasl - Type: ACT_GATHER_INFO
2017-02-14 Name: The remote Debian host is missing a security-related update.
File: debian_DSA-3786.nasl - Type: ACT_GATHER_INFO
2017-02-13 Name: The remote Debian host is missing a security update.
File: debian_DLA-822.nasl - Type: ACT_GATHER_INFO