← Back

CVE-2009-0316

nvd nist
Published: Jan 28, 2009Modified: Apr 23, 2026

JSON object

Loading...
6.9
Vector
AV:L/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 3.4 / Impact: 10.0
Source: NVD

Description

Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.

Affected (21)

Products: Vim: Vim
Vim
1 product
Vim
Configuration A
21 vulnerable
Vulnerable SoftwareAffected Versions
Vim
Vim
Up to 7.2
Vim
Version 1.0
Vim
Version 1.22
Vim
Version 3.0
Vim
Version 4.0
Vim
Version 5.0
Vim
Version 5.1
Vim
Version 5.2
Vim
Version 5.3
Vim
Version 5.4
Vim
Version 5.5
Vim
Version 5.6
Vim
Version 5.7
Vim
Version 5.8
Vim
Version 6.0
Vim
Version 6.1
Vim
Version 6.2
Vim
Version 6.3
Vim
Version 6.4
Vim
Version 7.0
Vim
Version 7.1

References (22)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.