CVE-2008-4101 Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a...
HighCVSS 9.3
EPSS 9.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) "Ctrl-]" (control close-square-bracket) or (3) "g]" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vim | <= 7.2 | No fix listed |
| vim | = 3.0 | No fix listed |
| vim | = 4.0 | No fix listed |
| vim | = 5.0 | No fix listed |
| vim | = 5.1 | No fix listed |
| vim | = 5.2 | No fix listed |
| vim | = 5.3 | No fix listed |
| vim | = 5.4 | No fix listed |
| vim | = 5.5 | No fix listed |
| vim | = 5.6 | No fix listed |
| vim | = 5.7 | No fix listed |
| vim | = 5.8 | No fix listed |
| vim | = 6.0 | No fix listed |
| vim | = 6.1 | No fix listed |
| vim | = 6.2 | No fix listed |
| vim | = 6.3 | No fix listed |
| vim | = 6.4 | No fix listed |
| vim | = 7.0 | No fix listed |
| vim | = 7.1 | No fix listed |
| debian/vim(Debian:12) | < 2:7.2.010-1 | 2:7.2.010-1 |
| debian/vim(Debian:13) | < 2:7.2.010-1 | 2:7.2.010-1 |
| debian/vim(Debian:14) | < 2:7.2.010-1 | 2:7.2.010-1 |
References
- Debian Security Tracker CVE-2008-4101 vendor-advisory
- bugs.debian.org issue-tracking
- [vim-dev] 20080903 Patch 7.2.010 exploit mailing-list
- groups.google.com
- groups.google.com patch
- groups.google.com exploit
- [vim_dev] 20080824 Bug with v_K and potentially K command mailing-list patch
- APPLE-SA-2008-10-09 vendor-advisory
- APPLE-SA-2010-03-29-1 vendor-advisory
- 31592 third-party-advisory
- 32222 third-party-advisory
- 32858 third-party-advisory
- 32864 third-party-advisory
- 33410 third-party-advisory
- support.apple.com
- support.apple.com
- support.avaya.com
- support.avaya.com
- MDVSA-2008:236 vendor-advisory
- [oss-security] 20080911 [oss-list] CVE request (vim) mailing-list
- [oss-security] 20080911 Re: [oss-list] CVE request (vim) mailing-list
- [oss-security] 20080915 Re: [oss-list] CVE request (vim) mailing-list
- [oss-security] 20080915 Re: [oss-list] CVE request (vim) mailing-list
- www.rdancer.org
- RHSA-2008:0580 vendor-advisory
- RHSA-2008:0617 vendor-advisory
- RHSA-2008:0618 vendor-advisory
- 20080822 Vim: Arbitrary Code Execution in Commands: K, Control-], g] mailing-list
- 20080825 RE: Arbitrary Code Execution in Commands: K, Control-], g] mailing-list
- 20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim mailing-list
- 30795 vdb-entry
- 31681 vdb-entry
- USN-712-1 vendor-advisory
- www.vmware.com
- ADV-2008-2780 vdb-entry
- ADV-2009-0033 vdb-entry
- ADV-2009-0904 vdb-entry
- bugzilla.redhat.com
- vim-normal-command-execution(44626) vdb-entry
- oval:org.mitre.oval:def:10894 signature vdb-entry
- oval:org.mitre.oval:def:5812 signature vdb-entry