| Package | Affected versions | Patched versions |
|---|---|---|
| vim | = 6.2= 6.3 |
Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free