CVE-2016-1248

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary…

published November 23, 2016

CVSS
—
EPSS
25%
Percentile
97.9
In the wild
Unconfirmed
What it is

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.25314 · 97.9th percentile
Published
2016-11-23T15:00Z
EPSS history
Timeline
  • 22 SEP 03:12Z
    EPSS moved 25% → 8%
    epss
  • 06 SEP 03:09Z
    EPSS moved 25% → 8%
    epss
  • 30 AUG 15:31Z
    EPSS moved 8% → 25%
    epss
  • 29 AUG 04:09Z
    EPSS moved 25% → 8%
    epss
  • 23 NOV 15:00Z
    vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary…
    cvelistv5