VULNERABILITY INTELLIGENCE
CVE-2002-1377
CVSS score4.6 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2002-12-23
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P
Description
vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to edit a malicious file, as demonstrated using mutt.