ALPINE-CVE-2016-1248 PUBLISHED CVSS 7.800000190734863 HIGH

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.

Risk Scores

CVSS v3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.18vim0, 7.2.284-r0, 7.2.394-r0
Alpine:v3.22vim7.2.394-r1, 7.3.401-r0, 7.3.364-r0
Alpine:v3.10vim7.3.82-r0, 7.2.284-r0, 7.2.394-r1
Alpine:v3.17vim8.0.0027-r0, 0, 7.2.394-r0
Alpine:v3.7vim7.3.661-r0, 8.0.0027-r0, 8.0.0008-r0
Alpine:v3.23vim8.0.0027-r0, 7.2.284-r0, 7.2.394-r0
Alpine:v3.14vim7.2.284-r0, 8.0.0027-r0, 8.0.0008-r0
Alpine:v3.5vim8.0.0027-r0, 0, 7.2.284-r0
Alpine:v3.20vim7.4-r3, 7.3.401-r0, 8.0.0027-r0
Alpine:v3.13vim8.0.0027-r0, 8.0.0008-r0, 8.0.0003-r0
Alpine:v3.21vim8.0.0027-r0, 7.3.600-r0, 7.3.515-r0
Alpine:v3.12vim7.3.112-r1, 0, 7.2.284-r0
Alpine:v3.8vim8.0.0027-r0, 7.2.284-r0, 7.2.394-r1
Alpine:v3.4vim7.3.547-r0, 0, 7.2.284-r0
Alpine:v3.19vim0, 7.2.284-r0, 7.2.394-r0
Alpine:v3.15vim7.3.333-r0, 0, 7.2.284-r0
Alpine:v3.3vim7.4.943-r3, 7.4.943-r2, 7.4.943-r1
Alpine:v3.2vim7.4.712-r0, 7.4-r3, 7.4-r2
Alpine:v3.16vim0, 7.2.284-r0, 7.2.394-r0
Alpine:v3.11vim8.0.0027-r0, 8.0.0008-r0, 8.0.0003-r0

…and 2 more

Timeline

References

Open in Interactive Console →