CVE

Id
9566  
CVE No.
CVE-2004-1138  
Status
Candidate  
Description
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.  
Phase
Assigned (20041206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
64807 9566 CVE-2004-1138 OPENPKG:OpenPKG-SA-2004.052  View
64808 9566 CVE-2004-1138 URL:http://marc.info/?l=bugtraq&m=110313588125609&w=2  View
64809 9566 CVE-2004-1138 FEDORA:FLSA:2343  View
64810 9566 CVE-2004-1138 URL:https://bugzilla.fedora.us/show_bug.cgi?id=2343  View
64811 9566 CVE-2004-1138 GENTOO:GLSA-200412-10  View
64812 9566 CVE-2004-1138 URL:http://www.gentoo.org/security/en/glsa/glsa-200412-10.xml  View
64813 9566 CVE-2004-1138 REDHAT:RHSA-2005:010  View
64814 9566 CVE-2004-1138 URL:http://www.redhat.com/support/errata/RHSA-2005-010.html  View
64815 9566 CVE-2004-1138 REDHAT:RHSA-2005:036  View
64816 9566 CVE-2004-1138 URL:http://www.redhat.com/support/errata/RHSA-2005-036.html  View
64817 9566 CVE-2004-1138 OVAL:oval:org.mitre.oval:def:9571  View
64818 9566 CVE-2004-1138 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9571  View
64819 9566 CVE-2004-1138 XF:vim-modeline-gain-privileges(18503)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63203 JVNDB-2004-000545 Ethereal の DICOM プロトコルの解析部におけるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2004-1139 9566 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000545.html  View