CVEvulnerability

CVE-2002-1377

4.6 MEDIUM Published 2002-12-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-12-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to edit a malicious file, as demonstrated using mutt.

Affected configurations

• vim development group vim 5.0 • vim development group vim 5.1 • vim development group vim 5.2 • vim development group vim 5.3 • vim development group vim 5.4 • vim development group vim 5.5 • vim development group vim 5.6 • vim development group vim 5.7 • vim development group vim 5.8 • vim development group vim 6.0 • vim development group vim 6.1

References