Summary
It was discovered that Vim incorrectly handled certain files.
An attacker could possibly use this issue to execute arbitrary code.
This issue only affected Ubuntu 16.04 LTS. (CVE-2017-5953)
It was discovered that Vim incorrectly handled certain files.
An attacker could possibly use this issue to execute arbitrary code.
(CVE-2019-12735)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | vim | 2:7.4.1689-3ubuntu1.3 |
| Ubuntu · 18.04 LTS 18.04:LTS | vim | 2:8.0.1453-1ubuntu1.1 |
Vulnerabilities 2
-
Unscored —
vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may resul…
-
Unscored —
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via t…