CVE-2007-2438

Publication date 2 May 2007

Last updated 24 July 2024


Ubuntu priority

The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.

Status

Package Ubuntu Release Status
vim 7.04 feisty
Fixed 7.0-164+1ubuntu7.2
6.10 edgy
Fixed 7.0-035+1ubuntu5.2
6.06 LTS dapper
Not affected

References

Related Ubuntu Security Notices (USN)

Other references