oss-sec mailing list archives

Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10


From: "Steven M. Christey" <coley () linus mitre org>
Date: Tue, 8 Jul 2008 13:53:48 -0400 (EDT)


On Mon, 7 Jul 2008, Jonathan Smith wrote:

Steve, could we get CVEs assigned, please? I'd imagine we'd need three;
one for the tarplugin issue, one for the zipplugin, and one for the
netrw issues (which are similar enough to probably justify lumping them
together).

CVE-2008-3074 - tarplugin
CVE-2008-3075 - zipplugin
CVE-2008-3076 - netrw issues

These will be filled in later.

- Steve


Current thread: