Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveFlexeraCVE-2007-2953
HistoryJul 31, 2007 - 10:17 a.m.

CVE-2007-2953

2007-07-3110:17:00
flexera
web.nvd.nist.gov
38
cve-2007-2953
vulnerability
vim
format string
helptags command
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.331

Percentile

97.1%

JSON

Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.

Affected configurations

Nvd
Node
vim_development_groupvimRange≀6.4
OR
vim_development_groupvimMatch7.0
OR
vim_development_groupvimMatch7.1
OR
vim_development_groupvimMatch7.1.38
VendorProductVersionCPE
vim_development_groupvim7.0cpe:/a:vim_development_group:vim:7.0:::
vim_development_groupvim7.1.38cpe:/a:vim_development_group:vim:7.1.38:::
vim_development_groupvimcpe:/a:vim_development_group:vim::::
vim_development_groupvim7.1cpe:/a:vim_development_group:vim:7.1:::

References

Related

openvas 25
nessus 17
veracode 1
freebsd 1
ubuntu 1
prion 1
ubuntucve 1
seebug 1
cvelist 1
debiancve 1
nvd 1
osv 2
debian 2
centos 2
oraclelinux 2
redhat 2
vmware 2
openvas
openvas
SLES9: Security update for vim and gvim
2009-10-10 00:00:00
Ubuntu: Security Advisory (USN-505-1)
2009-03-23 00:00:00
Mandriva Update for vim MDKSA-2007:168 (vim)
2009-04-09 00:00:00
nessus
nessus
openSUSE 10 Security Update : gvim (gvim-4092)
2007-10-17 00:00:00
SuSE 10 Security Update : vim and gvim (ZYPP Patch Number 4095)
2007-12-13 00:00:00
Mandrake Linux Security Advisory : vim (MDKSA-2007:168)
2007-08-28 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:25:49
freebsd
freebsd
vim -- Command Format String Vulnerability
2007-07-27 00:00:00
ubuntu
ubuntu
vim vulnerability
2007-08-28 00:00:00
prion
prion
Format string
2007-07-31 10:17:00
ubuntucve
ubuntucve
CVE-2007-2953
2007-07-31 00:00:00
seebug
seebug
Vim HelpTagsε‘½δ»€θΏœη¨‹ζ ΌεΌδΈ²ε€„η†ζΌζ΄ž
2007-08-01 00:00:00
cvelist
cvelist
CVE-2007-2953
2007-07-31 10:00:00
debiancve
debiancve
CVE-2007-2953
2007-07-31 10:17:00
nvd
nvd
CVE-2007-2953
2007-07-31 10:17:00
osv
osv
vim
2007-09-19 00:00:00
vim - several vulnerabilities
2007-09-19 00:00:00
debian
debian
[SECURITY] [DSA 1364-1] New vim packages fix several vulnerabilities
2007-09-01 11:30:35
[SECURITY] [DSA 1364-2] New vim packages fix several vulnerabilities
2007-09-19 22:20:43
centos
centos
vim security update
2008-11-25 16:56:47
vim security update
2008-11-26 22:22:41
oraclelinux
oraclelinux
vim security update
2008-11-25 00:00:00
vim security update
2008-11-25 00:00:00
redhat
redhat
(RHSA-2008:0617) Moderate: vim security update
2008-11-25 00:00:00
(RHSA-2008:0580) Moderate: vim security update
2008-11-25 00:00:00
vmware
vmware
ESX Service Console updates for openssl, bind, and vim
2009-03-31 00:00:00
ESX Service Console updates for openssl, bind, and vim
2009-03-31 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.331

Percentile

97.1%

JSON
Related for CVE-2007-2953
openvas25nessus17veracode1freebsd1ubuntu1prion1ubuntucve1seebug1cvelist1debiancve1nvd1osv2debian2centos2oraclelinux2redhat2vmware2