Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

Ubuntu: Vim vulnerabilities

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) Ubuntu: Vim vulnerabilities
# 1  
Old 01-27-2009
Ubuntu: Vim vulnerabilities
LinuxSecurity.com: Jan Minar discovered that Vim did not properly sanitize inputs before invoking the execute or system functions inside Vim scripts. If a user were tricked into running Vim scripts with a specially crafted input, an attacker could execute arbitrary code with the privileges of the user invoking the program. (CVE-2008-2712) Ben Schmidt discovered that Vim did not properly escape characters when performing keyword or tag lookups. If a user were tricked into running specially crafted commands, an attacker could execute arbitrary code with the privileges of the user invoking the program. (CVE-2008-4101)

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT MOJAVE

evim

EVIM(1) 						      General Commands Manual							   EVIM(1)

NAME

       evim - easy Vim, edit a file with Vim and setup for modeless editing

SYNOPSIS

       evim [options] [file ..]
       eview

DESCRIPTION

       eVim  starts  Vim and sets options to make it behave like a modeless editor.  This is still Vim but used as a point-and-click editor.  This
       feels a lot like using Notepad on MS-Windows.  eVim will always run in the GUI, to enable the use of menus and toolbar.

       Only to be used for people who really can't work with Vim in the normal way.  Editing will be much less efficient.

       eview is the same, but starts in read-only mode.  It works just like evim -R.

       See vim(1) for details about Vim, options, etc.

       The 'insertmode' option is set to be able to type text directly.
       Mappings are setup to make Copy and Paste work with the MS-Windows keys.  CTRL-X cuts text, CTRL-C copies text and CTRL-V pastes text.  Use
       CTRL-Q to obtain the original meaning of CTRL-V.

OPTIONS

       See vim(1).

FILES

       /usr/local/lib/vim/evim.vim
		      The script loaded to initialize eVim.

AKA

       Also  Known  As "Vim for gumbies".  When using evim you are expected to take a handkerchief, make a knot in each corner and wear it on your
       head.

SEE ALSO

       vim(1)

AUTHOR

       Most of Vim was made by Bram Moolenaar, with a lot of help from others.	See the Help/Credits menu.

								 2002 February 16							   EVIM(1)