CVE-2007-2953 - CVE Reference - Advisories

CVE Reference: CVE-2007-2953

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-2953

Description: Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35655 VIM http://www.attrition.org/pipermail/vim/2007-August/001770.html UBUNTU http://www.ubuntu.com/usn/usn-505-1 TRUSTIX http://www.trustix.org/errata/2007/0026/ SUSE http://www.novell.com/linux/security/advisories/2007_18_sr.html SAID Secunia Advisory: SA26522 Secunia Advisory: SA26822 Secunia Advisory: SA26674 Secunia Advisory: SA26653 Secunia Advisory: SA26285 Secunia Advisory: SA26594 Secunia Advisory: SA25941 MISC http://secunia.com/secunia_research/2007-66/advisory/ MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:168 DEBIAN http://www.debian.org/security/2007/dsa-1364 CONFIRM BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/475076/100/100/threaded BID 25095

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Linux Kernel LDT Buffer Size Handling Vulnerability

2.	Drupal Session Fixation Vulnerability

3.	OpenBSD BIND Query Port DNS Cache Poisoning

4.	Red Hat update for kernel

5.	Ubuntu update for php

6.	Debian update for xulrunner

7.	IPCop update for perl

8.	Debian update for cupsys

9.	Red Hat update for thunderbird

10.	Apple Safari Cross-Domain Cookie Injection Vulnerability