NVD

Id
2610  
Name
CVE-2008-2712  
Description
Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5) netrw. NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298. NOTE: the zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-06-16  
Modified Date
2012-10-30  
Seq
2008-2712  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
16384 2610 CVE-2008-2712 APPLE-SA-2008-10-09  View
16385 2610 CVE-2008-2712 APPLE-SA-2010-03-29-1  View
16386 2610 CVE-2008-2712 SUSE-SR:2009:007  View
16387 2610 CVE-2008-2712 20080701 Re: Collection of Vulnerabilities in Fully Patched Vim 7.1  View
16388 2610 CVE-2008-2712 oval:org.mitre.oval:def:11109  View
16389 2610 CVE-2008-2712 oval:org.mitre.oval:def:6238  View
16390 2610 CVE-2008-2712 3951  View
16391 2610 CVE-2008-2712 http://support.apple.com/kb/HT3216  View
16392 2610 CVE-2008-2712 http://support.apple.com/kb/HT4077  View
16393 2610 CVE-2008-2712 http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm  View
16394 2610 CVE-2008-2712 http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm  View
16395 2610 CVE-2008-2712 http://wiki.rpath.com/Advisories:rPSA-2008-0247  View
16396 2610 CVE-2008-2712 MDVSA-2008:236  View
16397 2610 CVE-2008-2712 [oss-security] 20080616 CVE Id request: vim  View
16398 2610 CVE-2008-2712 [oss-security] 20081015 Vim CVE issues cleanup (plugins tar.vim, zip.vim) - CVE-2008-3074 and CVE-2008-3075  View
16399 2610 CVE-2008-2712 http://www.rdancer.org/vulnerablevim.html  View
16400 2610 CVE-2008-2712 RHSA-2008:0580  View
16401 2610 CVE-2008-2712 RHSA-2008:0617  View
16402 2610 CVE-2008-2712 RHSA-2008:0618  View
16403 2610 CVE-2008-2712 20080613 Collection of Vulnerabilities in Fully Patched Vim 7.1  View
16404 2610 CVE-2008-2712 20080614 Re: Collection of Vulnerabilities in Fully Patched Vim 7.1  View
16405 2610 CVE-2008-2712 20080811 rPSA-2008-0247-1 gvim vim vim-minimal  View
16406 2610 CVE-2008-2712 20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim  View
16407 2610 CVE-2008-2712 29715  View
16408 2610 CVE-2008-2712 31681  View
16409 2610 CVE-2008-2712 1020293  View
16410 2610 CVE-2008-2712 USN-712-1  View
16411 2610 CVE-2008-2712 http://www.vmware.com/security/advisories/VMSA-2009-0004.html  View
16412 2610 CVE-2008-2712 ADV-2008-1851  View
16413 2610 CVE-2008-2712 ADV-2008-2780  View
16414 2610 CVE-2008-2712 ADV-2009-0033  View
16415 2610 CVE-2008-2712 ADV-2009-0904  View
16416 2610 CVE-2008-2712 vim-scripts-command-execution(43083)  View
16417 2610 CVE-2008-2712 https://issues.rpath.com/browse/RPL-2622  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46511 JVNDB-2008-001821 Vim における適切に入力をサニタイズしないことに関する任意のコードを実行される脆弱性 Vim には、Vim スクリプトの呼び出し前に適切に入力をサニタイズしないため、任意のコマンドを実行される脆弱性が存在します。 CVE-2008-2712 32825 CVE-2008-2712 2610 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001821.html 2008-10-09 2010-04-26 View