NVD

Id
17676  
Name
CVE-2016-1248  
Description
vim before patch 8.0.0056 does not properly validate values for the "filetype", "syntax" and "keymap" options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-11-23  
Modified Date
2017-01-17  
Seq
2016-1248  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
97423 17676 CVE-2016-1248 http://openwall.com/lists/oss-security/2016/11/22/20  View
97424 17676 CVE-2016-1248 RHSA-2016:2972  View
97425 17676 CVE-2016-1248 DSA-3722  View
97426 17676 CVE-2016-1248 94478  View
97427 17676 CVE-2016-1248 USN-3139-1  View
97428 17676 CVE-2016-1248 https://anonscm.debian.org/cgit/pkg-vim/vim.git/tree/debian/changelog  View
97429 17676 CVE-2016-1248 https://github.com/neovim/neovim/commit/4fad66fbe637818b6b3d6bc5d21923ba72795040  View
97430 17676 CVE-2016-1248 https://github.com/vim/vim/commit/d0b5138ba4bccff8a744c99836041ef6322ed39a  View
97431 17676 CVE-2016-1248 https://github.com/vim/vim/releases/tag/v8.0.0056  View
97432 17676 CVE-2016-1248 https://lists.debian.org/debian-lts-announce/2016/11/msg00025.html  View
97433 17676 CVE-2016-1248 https://lists.debian.org/debian-security-announce/2016/msg00305.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5165 JVNDB-2016-005938 Vim における任意のコードを実行される脆弱性 Vim は、"filetype"、"syntax" および "keymap" オプションの値を適切に検証しないため、任意のコードを実行される脆弱性が存在します。 CVE-2016-1248 87754 CVE-2016-1248 17676 6.8 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005938.html 2016-11-04 2016-11-28 View