CVE-2007-2953

Published: Jul 31, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.

Affected (4)

Products: Vim Development Group: Vim

Vim Development Group

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Vim Development Group Vim	Up to 6.4
Vim Development Group Vim	Version 7.0
Vim Development Group Vim	Version 7.1.38
Vim Development Group Vim	Version 7.1

References (64)

ftp://ftp.vim.org/pub/vim/patches/7.1/7.1.039 (unsafe URL)

Source: PSIRT-CNA@flexerasoftware.com

Patch

http://secunia.com/advisories/25941

Source: PSIRT-CNA@flexerasoftware.com

PatchVendor Advisory

http://secunia.com/advisories/26285

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/26522

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/26594

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/26653

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/26674

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/26822

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/32858

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/33410

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/secunia_research/2007-66/advisory/

Source: PSIRT-CNA@flexerasoftware.com

PatchVendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm

Source: PSIRT-CNA@flexerasoftware.com

http://www.attrition.org/pipermail/vim/2007-August/001770.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.debian.org/security/2007/dsa-1364

Source: PSIRT-CNA@flexerasoftware.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:168

Source: PSIRT-CNA@flexerasoftware.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:236

Source: PSIRT-CNA@flexerasoftware.com

http://www.novell.com/linux/security/advisories/2007_18_sr.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.redhat.com/support/errata/RHSA-2008-0580.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.redhat.com/support/errata/RHSA-2008-0617.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/475076/100/100/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/502322/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/25095

Source: PSIRT-CNA@flexerasoftware.com

Patch

http://www.trustix.org/errata/2007/0026/

Source: PSIRT-CNA@flexerasoftware.com

http://www.ubuntu.com/usn/usn-505-1

Source: PSIRT-CNA@flexerasoftware.com

http://www.vmware.com/security/advisories/VMSA-2009-0004.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2007/2687

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2009/0033

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2009/0904

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/35655

Source: PSIRT-CNA@flexerasoftware.com

https://issues.rpath.com/browse/RPL-1595

Source: PSIRT-CNA@flexerasoftware.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11549

Source: PSIRT-CNA@flexerasoftware.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6463

Source: PSIRT-CNA@flexerasoftware.com

ftp://ftp.vim.org/pub/vim/patches/7.1/7.1.039 (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/advisories/25941

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/26285

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26522

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26594

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26653

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26674

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26822

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32858

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33410

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/secunia_research/2007-66/advisory/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.attrition.org/pipermail/vim/2007-August/001770.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1364

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:168

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:236

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2007_18_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0580.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0617.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/475076/100/100/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/502322/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/25095

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.trustix.org/errata/2007/0026/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-505-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/security/advisories/VMSA-2009-0004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/2687

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/0033

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/0904

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/35655

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-1595

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11549

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6463

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.