« List of all CVEs

CVE-2016-1248

Published: 11/23/2016 Last updated: 8/5/2024 Reserved: 12/27/2015

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.

CNA assigner: debian (79363d38-fa19-49d1-9214-5f28da3f3ac5) Requested by: n/a

Opam packages affected (1)

conf-vim

Products affected (1)

Product Vendor Version
vim before patch 8.0.0056 n/a SRV1H

References (26)