CVE-2008-3432

Published: Oct 10, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case.

Affected (2)

Products: Vim: Vim

Vim

1 product

Vim

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Vim Vim	Version 6.2
Vim Vim	Version 6.3

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (44)

ftp://ftp.vim.org/pub/vim/patches/6.2.429 (unsafe URL)

Source: secalert@redhat.com

ftp://ftp.vim.org/pub/vim/patches/6.3/6.3.059 (unsafe URL)

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/32222

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/32858

Source: secalert@redhat.com

http://secunia.com/advisories/33410

Source: secalert@redhat.com

http://support.apple.com/kb/HT3216

Source: secalert@redhat.com

Vendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2008/07/15/4

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2008/08/01/1

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0617.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/502322/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/30648

Source: secalert@redhat.com

http://www.securityfocus.com/bid/31681

Source: secalert@redhat.com

Patch

http://www.vmware.com/security/advisories/VMSA-2009-0004.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/2780

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/0033

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/0904

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=455455

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/44722

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11203

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5987

Source: secalert@redhat.com

ftp://ftp.vim.org/pub/vim/patches/6.2.429 (unsafe URL)