Skip to content
OpenAdvisories
Unscored DSA-1733-1 5 CVEs

vim - multiple vulnerabilities

Published Mar 3, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 vim 1:7.0-122+1etch5

Vulnerabilities 5

  • Unscored —
    CVE-2008-2712 Public exploit EPSS 15%

    Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim script…

    vim Debian
  • Unscored —
    CVE-2008-3074

    The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary…

    vim Debian
  • Unscored —
    CVE-2008-3075

    The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary…

    vim Debian
  • Unscored —
    CVE-2008-3076 Public exploit

    The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell met…

    vim Debian
  • Unscored —
    CVE-2008-4101 Public exploit

    Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) exe…

    vim Debian