CVE-2008-3432 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-3432
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-3432

Description: Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/44722 SAID Secunia Advisory: SA32222 Secunia Advisory: SA33410 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0617.html MLIST http://www.openwall.com/lists/oss-security/2008/08/01/1 http://www.openwall.com/lists/oss-security/2008/07/15/4 CONFIRM http://www.vmware.com/security/advisories/VMSA-2009-0004.html http://support.apple.com/kb/HT3216 http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/502322/100/0/threaded BID 31681 30648 APPLE http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Return to the previous page.