CVE-2007-2438

Publication date 2 May 2007

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
vim 7.04 feisty
Fixed 7.0-164+1ubuntu7.2
6.10 edgy
Fixed 7.0-035+1ubuntu5.2
6.06 LTS dapper
Not affected

References

Related Ubuntu Security Notices (USN)

Other references