VDB
DEBIAN-CVE-2016-1248
DEBIAN-CVE-2016-1248
PUBLISHED
CVSS 7.800000190734863 HIGH
vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.
Risk Scores
CVSS v3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | vim | 0, 0, 0 |
| Debian:14 | neovim | 0, 0, 0 |
| Debian:11 | vim | 0, 0, 0 |
| Debian:12 | vim | 0, 0, 0 |
| Debian:12 | neovim | 0, 0, 0 |
| Debian:13 | neovim | 0, 0, 0 |
| Debian:11 | neovim | 0, 0, 0 |
| Debian:13 | vim | 0, 0, 0 |
Timeline
- Nov 23, 2016 CVE Published
- Apr 28, 2026 CVE Updated