Description
The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | vim | 1:7.1-022+1 | — |
| Debian 13 | vim | 1:7.1-022+1 | — |
| Debian 12 | vim | 1:7.1-022+1 | — |
| Debian 4.0 | vim | 1:7.0-122+1etch3 | DSA-1364-2, DSA-1364-1 |
| Debian 3.1 | vim | 1:6.3-071+1sarge2 | DSA-1364-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | vim +4 | 2:7.0.109-3.el5.3 | RHSA-2007:0346 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | vim | 8.2.3408-1.2 | openSUSE-SU-2024:11497-1 |
Advisories 4
- RHSA-2007:0346 Red Hat Security Advisory: vim security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1364-1 vim Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1364-2 vim - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:11497-1 gvim-8.2.3408-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 25024 third-party-advisory
- 25159 third-party-advisory
- [vim-dev] 20070426 feedkeys() allowed in sandbox mailing-list
- 1018035 vdb-entry
- USN-463-1 vendor-advisory
- ADV-2007-1599 vdb-entry
- 25182 third-party-advisory
- 2007-0017 vendor-advisory
- SUSE-SR:2007:012 vendor-advisory
- http://tech.groups.yahoo.com/group/vimdev/message/46627
- [vim-dev] 20070428 Re: feedkeys() allowed in sandbox mailing-list
- RHSA-2007:0346 vendor-advisory
- http://tech.groups.yahoo.com/group/vimdev/message/46658
- vim-feedkeyswritefile-command-execution(34012) vdb-entry
- DSA-1364 vendor-advisory
- http://tech.groups.yahoo.com/group/vimdev/message/46645
- 26653 third-party-advisory
- 20070513 OMG VIM VULN mailing-list
- 20070823 vim editor duplicates / clarifications mailing-list
- http://www.vim.org/news/news.php
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=238259
- 23725 vdb-entry
- 20070430 FLEA-2007-0014-1: vim mailing-list
- [vimannounce] 20070512 Stable Vim version 7.1 has been released mailing-list
- 25255 third-party-advisory
- oval:org.mitre.oval:def:9876 vdb-entry signature
- MDKSA-2007:101 vendor-advisory
- 25432 third-party-advisory
- 25367 third-party-advisory
- 36250 vdb-entry