NetSight
IP …
critical9.3

CVE-2005-2368

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob …

Impact

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

Affected products

VendorProductAffected versions
Vim Development GroupVim
Versions 6.3, 6.3.011, 6.3.025, 6.3.030, 6.3.044, 6.3.081

Weakness classification

CWE-78

References