vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-vimalpine-linux-upgrade-neovim | Sep 20, 2017 | Nov 23, 2016 | |
| Amazon_linux | — | amazon-linux-upgrade-vim | Dec 20, 2016 | Nov 23, 2016 |
| Apple Osx Vim | apple-osx-upgrade-latest | Jan 24, 2017 | Nov 23, 2016 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Nov 23, 2016 | |
| Centos_linux | — | centos-upgrade-vim-commoncentos-upgrade-vim-enhancedcentos-upgrade-vim-filesystemcentos-upgrade-vim-minimalcentos-upgrade-vim-x11 | Jan 27, 2017 | Nov 23, 2016 |
| Debian | debian-upgrade-neovimdebian-upgrade-vim | Nov 23, 2016 | Nov 22, 2016 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Mar 20, 2017 | |
| Freebsd | freebsd-upgrade-package-vimfreebsd-upgrade-package-vim-consolefreebsd-upgrade-package-vim-litefreebsd-upgrade-package-neovim | Dec 23, 2016 | Dec 23, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-app-editors-gvimgentoo-linux-upgrade-app-editors-vim | Oct 30, 2017 | Nov 23, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-vim-commonhuawei-euleros-2_0_sp1-upgrade-vim-enhancedhuawei-euleros-2_0_sp1-upgrade-vim-filesystemhuawei-euleros-2_0_sp1-upgrade-vim-minimalhuawei-euleros-2_0_sp1-upgrade-vim-x11 | Nov 30, 2017 | Nov 23, 2016 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-vim-commonhuawei-euleros-2_0_sp2-upgrade-vim-enhancedhuawei-euleros-2_0_sp2-upgrade-vim-filesystemhuawei-euleros-2_0_sp2-upgrade-vim-minimalhuawei-euleros-2_0_sp2-upgrade-vim-x11 | Nov 30, 2017 | Nov 23, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-editor-gvim-8-0-95-0-175-3-21-0-4-0oracle-solaris-11-3-upgrade-editor-vim-8-0-95-0-175-3-21-0-4-0oracle-solaris-11-3-upgrade-editor-vim-vim-core-8-0-95-0-175-3-21-0-4-0 | Jun 20, 2017 | Nov 23, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-vim-commonoracle-linux-upgrade-vim-enhancedoracle-linux-upgrade-vim-filesystemoracle-linux-upgrade-vim-minimaloracle-linux-upgrade-vim-x11 | Dec 21, 2016 | Nov 20, 2016 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-vim-commonredhat-upgrade-vim-debuginforedhat-upgrade-vim-enhancedredhat-upgrade-vim-filesystemredhat-upgrade-vim-minimalredhat-upgrade-vim-x11 | Dec 21, 2016 | Nov 23, 2016 | |
| Suse | — | suse-upgrade-gvimsuse-upgrade-vimsuse-upgrade-vim-basesuse-upgrade-vim-data | Nov 29, 2016 | Nov 23, 2016 |
| Ubuntu | ubuntu-upgrade-vimubuntu-upgrade-vim-commonubuntu-upgrade-vim-gui-commonubuntu-upgrade-vim-runtime | Nov 29, 2016 | Nov 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub