Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to edit a malicious file, as demonstrated using mutt.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
VIM ModeLines本地任意命令执行漏洞
Vulnerability Description
Vim是一款开源的、可配置的用于创建和更改任何类型文本的文本编辑器，它可使用在大多数UNIX系统和Apple OS X中。 VIM的modelines功能对用户输入缺少正确过滤，本地攻击者可以利用这个漏洞通过modeline功能执行任意命令。 根据报告VIM的modelines功能存在问题，Modelines功能允许在文本文件开头结尾放置指令来指定编辑器怎样处理文件中的部分元素，但是由于输入处理不正确，通过在文本文件中设置恶意标记，诱使用户打开时以其他用户权限执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A