| Package | Affected versions | Patched versions |
|---|---|---|
| vim | = 3.0= 4.0= 5.0= 5.1= 5.2= 5.3= 5.4= 5.5= 5.6= 5.7= 5.8= 6.0= 6.1= 6.2= 6.3= 6.4= 7.0= 7.1≤ 7.2 |
Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) "Ctrl-]" (control close-square-bracket) or (3) "g]" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free