CVE

Id
88067  
CVE No.
CVE-2016-1248  
Status
Candidate  
Description
vim before patch 8.0.0056 does not properly validate values for the "filetype", "syntax" and "keymap" options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.  
Phase
Assigned (20151227)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
766074 88067 CVE-2016-1248 CONFIRM:http://openwall.com/lists/oss-security/2016/11/22/20  View
766075 88067 CVE-2016-1248 CONFIRM:https://anonscm.debian.org/cgit/pkg-vim/vim.git/tree/debian/changelog  View
766076 88067 CVE-2016-1248 CONFIRM:https://github.com/neovim/neovim/commit/4fad66fbe637818b6b3d6bc5d21923ba72795040  View
766077 88067 CVE-2016-1248 CONFIRM:https://github.com/vim/vim/commit/d0b5138ba4bccff8a744c99836041ef6322ed39a  View
766078 88067 CVE-2016-1248 CONFIRM:https://github.com/vim/vim/releases/tag/v8.0.0056  View
766079 88067 CVE-2016-1248 CONFIRM:https://lists.debian.org/debian-lts-announce/2016/11/msg00025.html  View
766080 88067 CVE-2016-1248 CONFIRM:https://lists.debian.org/debian-security-announce/2016/msg00305.html  View
766081 88067 CVE-2016-1248 DEBIAN:DSA-3722  View
766082 88067 CVE-2016-1248 URL:http://www.debian.org/security/2016/dsa-3722  View
766083 88067 CVE-2016-1248 REDHAT:RHSA-2016:2972  View
766084 88067 CVE-2016-1248 URL:http://rhn.redhat.com/errata/RHSA-2016-2972.html  View
766085 88067 CVE-2016-1248 UBUNTU:USN-3139-1  View
766086 88067 CVE-2016-1248 URL:http://www.ubuntu.com/usn/USN-3139-1  View
766087 88067 CVE-2016-1248 BID:94478  View

Related JVN