« List of all CVEs

CVE-2008-3432

Published: 10/10/2008 Last updated: 8/7/2024 Reserved: 7/31/2008

Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Opam packages affected (1)

conf-vim

Products affected (1)

Product Vendor Version
n/a n/a n/a

References (44)