CVE-2009-0316
28.01.2009, 11:30
Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| vim | vim | 𝑥 ≤ 7.2 |
| vim | vim | 1.0 |
| vim | vim | 1.22 |
| vim | vim | 3.0 |
| vim | vim | 4.0 |
| vim | vim | 5.0 |
| vim | vim | 5.1 |
| vim | vim | 5.2 |
| vim | vim | 5.3 |
| vim | vim | 5.4 |
| vim | vim | 5.5 |
| vim | vim | 5.6 |
| vim | vim | 5.7 |
| vim | vim | 5.8 |
| vim | vim | 6.0 |
| vim | vim | 6.1 |
| vim | vim | 6.2 |
| vim | vim | 6.3 |
| vim | vim | 6.4 |
| vim | vim | 7.0 |
| vim | vim | 7.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| gvim |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| vim |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| vim-data |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| vim-data-common |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| vim-small |
|
References