CVE-2007-2953

Description

Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.

6.8

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 10.04% Top 10%

Vendor Advisory mandriva.com Vendor Advisory ubuntu.com Vendor Advisory redhat.com Vendor Advisory trustix.org Vendor Advisory debian.org Vendor Advisory novell.com Vendor Advisory mandriva.com Vendor Advisory redhat.com Vendor Advisory secunia.com Vendor Advisory secunia.com

Affected: n/a n/a

References

Link	Tags
http://www.vmware.com/security/advisories/VMSA-2009-0004.html
http://www.securityfocus.com/bid/25095	vdb entry patch
http://secunia.com/advisories/26822	third party advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:168	vendor advisory
http://secunia.com/advisories/26522	third party advisory
http://secunia.com/advisories/26285	third party advisory
https://issues.rpath.com/browse/RPL-1595
http://secunia.com/advisories/26594	third party advisory
http://secunia.com/advisories/25941	third party advisory patch vendor advisory
http://secunia.com/advisories/32858	third party advisory
http://secunia.com/advisories/33410	third party advisory
http://www.ubuntu.com/usn/usn-505-1	vendor advisory
http://www.redhat.com/support/errata/RHSA-2008-0580.html	vendor advisory
http://www.securityfocus.com/archive/1/475076/100/100/threaded	mailing list
http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm
http://www.vupen.com/english/advisories/2007/2687	vdb entry
http://www.vupen.com/english/advisories/2009/0904	vdb entry
http://www.vupen.com/english/advisories/2009/0033	vdb entry
http://www.securityfocus.com/archive/1/502322/100/0/threaded	mailing list
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6463	vdb entry signature
http://www.trustix.org/errata/2007/0026/	vendor advisory
http://www.debian.org/security/2007/dsa-1364	vendor advisory
http://www.novell.com/linux/security/advisories/2007_18_sr.html	vendor advisory
http://secunia.com/secunia_research/2007-66/advisory/	patch vendor advisory
http://secunia.com/advisories/26653	third party advisory
http://www.attrition.org/pipermail/vim/2007-August/001770.html	mailing list
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11549	vdb entry signature
https://exchange.xforce.ibmcloud.com/vulnerabilities/35655	vdb entry
http://www.mandriva.com/security/advisories?name=MDVSA-2008:236	vendor advisory
http://secunia.com/advisories/26674	third party advisory
ftp://ftp.vim.org/pub/vim/patches/7.1/7.1.039	patch
http://www.redhat.com/support/errata/RHSA-2008-0617.html	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2007-2953?: CVE-2007-2953 has been scored as a medium severity vulnerability.
How to fix CVE-2007-2953?: To fix CVE-2007-2953, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-2953 being actively exploited in the wild?: It is possible that CVE-2007-2953 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~10% probability that this vulnerability will be exploited by malicious actors in the next 30 days.