Vulnerability in Vim Development Group

CVE-2007-2953

Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.

EPSS: 0.042 (89.9th percentile) — read the EPSS interpretation.

Affected products

Vim_development_group Vim — versions 7.0, 7.1, 7.1.38
N/a — versions n/a

References

PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM)
PSIRT-CNA@flexerasoftware.com (Patch, vdb-entry, x_refsource_BID)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (vendor-advisory, x_refsource_MANDRIVA)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)