6.9

CVE-2009-0316

Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.

Data is provided by the National Vulnerability Database (NVD)
Vim ≫ Vim Version <= 7.2
Vim ≫ Vim Version1.0
Vim ≫ Vim Version1.22
Vim ≫ Vim Version3.0
Vim ≫ Vim Version4.0
Vim ≫ Vim Version5.0
Vim ≫ Vim Version5.1
Vim ≫ Vim Version5.2
Vim ≫ Vim Version5.3
Vim ≫ Vim Version5.4
Vim ≫ Vim Version5.5
Vim ≫ Vim Version5.6
Vim ≫ Vim Version5.7
Vim ≫ Vim Version5.8
Vim ≫ Vim Version6.0
Vim ≫ Vim Version6.1
Vim ≫ Vim Version6.2
Vim ≫ Vim Version6.3
Vim ≫ Vim Version6.4
Vim ≫ Vim Version7.0
Vim ≫ Vim Version7.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.16% 0.37
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C