CVE Vulnerabilities

CVE-2004-1138

Published: Jan 10, 2005 | Modified: Oct 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.

Affected Software

Name Vendor Start Version End Version
Vim Vim_development_group 5.0 5.0
Vim Vim_development_group 5.1 5.1
Vim Vim_development_group 5.2 5.2
Vim Vim_development_group 5.3 5.3
Vim Vim_development_group 5.4 5.4
Vim Vim_development_group 5.5 5.5
Vim Vim_development_group 5.6 5.6
Vim Vim_development_group 5.7 5.7
Vim Vim_development_group 5.8 5.8
Vim Vim_development_group 6.0 6.0
Vim Vim_development_group 6.1 6.1
Vim Vim_development_group 6.2 6.2
Vim Vim_development_group 6.3.011 6.3.011
Vim Vim_development_group 6.3.025 6.3.025
Vim Vim_development_group 6.3.030 6.3.030
Vim Vim_development_group 6.3.044 6.3.044
Red Hat Enterprise Linux 3 RedHat vim-1:6.3.046-0.30E.1 *
Red Hat Enterprise Linux 4 RedHat vim-1:6.3.046-0.40E.4 *
Vim Ubuntu dapper *
Vim Ubuntu devel *
Vim Ubuntu edgy *
Vim Ubuntu feisty *

References