CVE-2007-2438 Code injection in n/a
User-assisted attackers can execute shell commands and write files via modelines due to dangerous functions allowed in the Vim sandbox.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2007-2438?
CVE-2007-2438 is a high-severity code injection vulnerability in n/a, published on 2 May 2007. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.
Which versions are affected by CVE-2007-2438?
It affects 1 product.
Linux distribution packages (12)
vim Red Hat:enterprise_linux:5::client | All versions | 2:7.0.109-3.el5.3 |
vim-X11 Red Hat:enterprise_linux:5::client | All versions | 2:7.0.109-3.el5.3 |
vim-common Red Hat:enterprise_linux:5::client | All versions | 2:7.0.109-3.el5.3 |
vim-debuginfo Red Hat:enterprise_linux:5::client | All versions | 2:7.0.109-3.el5.3 |
vim-enhanced Red Hat:enterprise_linux:5::client | All versions | 2:7.0.109-3.el5.3 |
vim-minimal Red Hat:enterprise_linux:5::client | All versions | 2:7.0.109-3.el5.3 |
vim Red Hat:enterprise_linux:5::server | All versions | 2:7.0.109-3.el5.3 |
vim-X11 Red Hat:enterprise_linux:5::server | All versions | 2:7.0.109-3.el5.3 |
vim-common Red Hat:enterprise_linux:5::server | All versions | 2:7.0.109-3.el5.3 |
vim-debuginfo Red Hat:enterprise_linux:5::server | All versions | 2:7.0.109-3.el5.3 |
vim-enhanced Red Hat:enterprise_linux:5::server | All versions | 2:7.0.109-3.el5.3 |
vim-minimal Red Hat:enterprise_linux:5::server | All versions | 2:7.0.109-3.el5.3 |
Products include Vim Development Group Vim.
How do I fix CVE-2007-2438?
Apply the vendor's patch.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2007-2438 being exploited?
There is no known exploitation of CVE-2007-2438 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as CVE-2007-2653, DEBIAN-CVE-2007-2438, GHSA-x2f5-352x-j9w7, RHSA-2007:0346.