4.6
CVE-2002-1377
- EPSS 0.08%
- Veröffentlicht 23.12.2002 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Loginvim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to edit a malicious file, as demonstrated using mutt.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Vim Development Group ≫ Vim Version5.0
Vim Development Group ≫ Vim Version5.1
Vim Development Group ≫ Vim Version5.2
Vim Development Group ≫ Vim Version5.3
Vim Development Group ≫ Vim Version5.4
Vim Development Group ≫ Vim Version5.5
Vim Development Group ≫ Vim Version5.6
Vim Development Group ≫ Vim Version5.7
Vim Development Group ≫ Vim Version5.8
Vim Development Group ≫ Vim Version6.0
Vim Development Group ≫ Vim Version6.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.08% | 0.201 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|