CVE-2001-0408 — Development Group VIM vulnerability
4 documents4 sources
Severity
5.1MEDIUMNVD
EPSS
0.9%
top 24.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 18
Latest updateApr 30
Description
vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes.
CVSS vector
AV:N/AC:H/C:P/I:P/A:PExploitability: 4.9 | Impact: 6.4
Affected Packages1 packages
Patches
🔴Vulnerability Details
1GHSA▶
GHSA-j8qm-vm5m-59fw: vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user op↗2022-04-30