CVE-2007-2953: Medium severity Vim Development Group Vim vulnerability
Format string vulnerability in the helptagsone function in src/excmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2953?
CVE-2007-2953 is considered to have a medium severity as it allows user-assisted remote code execution.
How can I fix CVE-2007-2953?
To fix CVE-2007-2953, upgrade to Vim version 7.2 or later, which addresses this format string vulnerability.
Which versions of Vim are affected by CVE-2007-2953?
Vim 6.4 and earlier, as well as Vim 7.0 through 7.1.38, are affected by CVE-2007-2953.
What type of vulnerability is CVE-2007-2953?
CVE-2007-2953 is a format string vulnerability that can lead to arbitrary code execution.
Is user interaction required for CVE-2007-2953 to be exploited?
Yes, CVE-2007-2953 requires user interaction as it involves user-assisted remote attacks via crafted help files.