Approved changes feed: RSS · Atom

cpe:2.3:a:vim_development_group:vim:6.0:*:*:*:*:*:*:*

part: a version: 6.0 update: *

VendorVim Development Group (931c73c1-2aad-5dad-8937-1d9fd93b312f)
ProductVim (4079c9d7-c459-5540-a5c6-4c5024c87d64)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-1138 vulnerable 2026-06-08 04:47:53.048735 Details available
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.
Published: 2004-12-22T05:00:00.000Z
Updated: 2024-08-08T00:39:00.870Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1377 vulnerable 2026-06-08 04:46:23.636746 Details available
vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to edit a malicious file, as demonstrated using mutt.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T03:19:28.975Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.