Description
vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes.
References
- CSSA-2001-014.0 vendor-advisory
- vim-elevate-privileges(6259) vdb-entry
- RHSA-2001:008 vendor-advisory
- 20010329 Immunix OS Security update for vim mailing-list
- 2510 vdb-entry
- MDKSA-2001:035 vendor-advisory
- SuSE-SA:2001:12 vendor-advisory