Описание
vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 0.1.6-5 |
| esm-infra-legacy/trusty | DNE | |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 0.1.6-4 |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE | |
| xenial | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2:8.0.0095-1ubuntu2 |
| esm-infra-legacy/trusty | released | 2:7.4.052-1ubuntu3.1 |
| esm-infra/xenial | released | 2:7.4.1689-3ubuntu1.2 |
| precise | released | 2:7.3.429-2ubuntu2.2 |
| precise/esm | not-affected | 2:7.3.429-2ubuntu2.2 |
| trusty | released | 2:7.4.052-1ubuntu3.1 |
| trusty/esm | released | 2:7.4.052-1ubuntu3.1 |
| upstream | released | 2:8.0.0095-1 |
| vivid/stable-phone-overlay | ignored | end of life |
| vivid/ubuntu-core | ignored | end of life |
Показывать по
Ссылки на источники
EPSS
6.8 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.
vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.
vim before patch 8.0.0056 does not properly validate values for the 'f ...
EPSS
6.8 Medium
CVSS2
7.8 High
CVSS3