Lucene search

MitreCVE-2009-0316

HistoryJan 28, 2009 - 11:30 a.m.

CVE-2009-0316

2009-01-2811:30:00

mitre

web.nvd.nist.gov

cve-2009-0316

untrusted search path

python interface

vim 7.2.045

arbitrary code execution

cve-2008-5983

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

23.5%

JSON

Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.

Affected configurations

Nvd

Node

vimvimRange≤7.2

vimvimMatch1.0

vimvimMatch1.22

vimvimMatch3.0

vimvimMatch4.0

vimvimMatch5.0

vimvimMatch5.1

vimvimMatch5.2

vimvimMatch5.3

vimvimMatch5.4

vimvimMatch5.5

vimvimMatch5.6

vimvimMatch5.7

vimvimMatch5.8

vimvimMatch6.0

vimvimMatch6.1

vimvimMatch6.2

vimvimMatch6.3

vimvimMatch6.4

vimvimMatch7.0

vimvimMatch7.1

VendorProductVersionCPE
vimvim*cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*
vimvim1.0cpe:2.3:a:vim:vim:1.0:*:*:*:*:*:*:*
vimvim1.22cpe:2.3:a:vim:vim:1.22:*:*:*:*:*:*:*
vimvim3.0cpe:2.3:a:vim:vim:3.0:*:*:*:*:*:*:*
vimvim4.0cpe:2.3:a:vim:vim:4.0:*:*:*:*:*:*:*
vimvim5.0cpe:2.3:a:vim:vim:5.0:*:*:*:*:*:*:*
vimvim5.1cpe:2.3:a:vim:vim:5.1:*:*:*:*:*:*:*
vimvim5.2cpe:2.3:a:vim:vim:5.2:*:*:*:*:*:*:*
vimvim5.3cpe:2.3:a:vim:vim:5.3:*:*:*:*:*:*:*
vimvim5.4cpe:2.3:a:vim:vim:5.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vim	vim	*	cpe:2.3:a:vim:vim::::::::
vim	vim	1.0	cpe:2.3:a:vim:vim:1.0:::::::*
vim	vim	1.22	cpe:2.3:a:vim:vim:1.22:::::::*
vim	vim	3.0	cpe:2.3:a:vim:vim:3.0:::::::*
vim	vim	4.0	cpe:2.3:a:vim:vim:4.0:::::::*
vim	vim	5.0	cpe:2.3:a:vim:vim:5.0:::::::*
vim	vim	5.1	cpe:2.3:a:vim:vim:5.1:::::::*
vim	vim	5.2	cpe:2.3:a:vim:vim:5.2:::::::*
vim	vim	5.3	cpe:2.3:a:vim:vim:5.3:::::::*
vim	vim	5.4	cpe:2.3:a:vim:vim:5.4:::::::*