Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-2438

Опубликовано: 02 мая 2007
Источник: nvd
CVSS2: 7.6
EPSS Низкий

Описание

The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:foresight_linux:foresight_linux:1.1:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 86%
0.03042
Низкий

7.6 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
больше 18 лет назад

The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.

redhat
больше 18 лет назад

The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.

debian
больше 18 лет назад

The sandbox for vim allows dangerous functions such as (1) writefile, ...

github
больше 3 лет назад

The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.

oracle-oval
около 18 лет назад

ELSA-2007-0346: Moderate: vim security update (MODERATE)

EPSS

Процентиль: 86%
0.03042
Низкий

7.6 High

CVSS2

Дефекты

NVD-CWE-Other