Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2007-2953
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-2953

Description:
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/35655

VIM
  http://www.attrition.org/pipermail/vim/2007-August/001770.html

UBUNTU
  http://www.ubuntu.com/usn/usn-505-1

TRUSTIX
  http://www.trustix.org/errata/2007/0026/

SUSE
  http://www.novell.com/linux/security/advisories/2007_18_sr.html

SAID
  Secunia Advisory: SA26285
  Secunia Advisory: SA26594
  Secunia Advisory: SA26653
  Secunia Advisory: SA26674
  Secunia Advisory: SA26822
  Secunia Advisory: SA25941
  Secunia Advisory: SA26522
  Secunia Advisory: SA33410

REDHAT
  http://www.redhat.com/support/errata/RHSA-2008-0580.html
  http://www.redhat.com/support/errata/RHSA-2008-0617.html

MISC
  http://secunia.com/secunia_research/2007-66/advisory/

MANDRIVA
  http://www.mandriva.com/security/advisories?name=MDKSA-2007:168
  http://www.mandriva.com/security/advisories?name=MDVSA-2008:236

DEBIAN
  http://www.debian.org/security/2007/dsa-1364

CONFIRM
  http://www.vmware.com/security/advisories/VMSA-2009-0004.html
  http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/502322/100/0/threaded
  http://www.securityfocus.com/archive/1/archive/1/475076/100/100/threaded

BID
  25095


Return to the previous page.