CVE-2007-2953 - Secunia Advisories - Vulnerability Intelligence

Secunia Advisories

CVE Reference: CVE-2007-2953
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-2953

Description: Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35655 VIM http://www.attrition.org/pipermail/vim/2007-August/001770.html UBUNTU http://www.ubuntu.com/usn/usn-505-1 TRUSTIX http://www.trustix.org/errata/2007/0026/ SUSE http://www.novell.com/linux/security/advisories/2007_18_sr.html SAID Secunia Advisory: SA26522 Secunia Advisory: SA26822 Secunia Advisory: SA26674 Secunia Advisory: SA26653 Secunia Advisory: SA26285 Secunia Advisory: SA26594 Secunia Advisory: SA25941 MISC http://secunia.com/secunia_research/2007-66/advisory/ MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:168 DEBIAN http://www.debian.org/security/2007/dsa-1364 CONFIRM BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/475076/100/100/threaded BID 25095

Return to the previous page.