CVE-2004-1138

Published: Jan 10, 2005Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.

Affected (16)

Products: Vim Development Group: Vim

Vim Development Group

1 product

Vim

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Vim Development Group Vim	Version 5.0
Vim Development Group Vim	Version 5.1
Vim Development Group Vim	Version 5.2
Vim Development Group Vim	Version 5.3
Vim Development Group Vim	Version 5.4
Vim Development Group Vim	Version 5.5
Vim Development Group Vim	Version 5.6
Vim Development Group Vim	Version 5.7
Vim Development Group Vim	Version 5.8
Vim Development Group Vim	Version 6.0
Vim Development Group Vim	Version 6.1
Vim Development Group Vim	Version 6.2
Vim Development Group Vim	Version 6.3.011
Vim Development Group Vim	Version 6.3.025
Vim Development Group Vim	Version 6.3.030
Vim Development Group Vim	Version 6.3.044