VULNERABILITY INTELLIGENCE

CVE-2007-2438

CVSS score7.6 HIGH
EPSS probability3.22%
CISA KEVNot currently listed
Published2007-05-02
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:C/I:C/A:C

Description

The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.

Primary references