CVE-2007-2438: vim_development_group vim

EPSS trend

Probability

3.22%

Chance of exploitation in the next 30 days

Percentile

88%

Versus all other CVEs

30-day change

0.00 pp

From 3.22% on 20-09-2026

20-09-202620-10-2026

EPSS score

3.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (marc.info)
Maturity: unknown

References

39 links

secunia.com/advisories/25024Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/25159Third Party AdvisoryX Refsource SECUNIAVendor Advisory
marc.info?l=vim-dev&m=117762581821298&w=2Mailing ListX Refsource MLIST
www.securitytracker.com/id?1018035VDB EntryX Refsource SECTRACK
www.ubuntu.com/usn/usn-463-1Vendor AdvisoryX Refsource UBUNTU
www.vupen.com/english/advisories/2007/1599VDB EntryX Refsource VUPEN
secunia.com/advisories/25182Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.trustix.org/errata/2007/0017/Vendor AdvisoryX Refsource TRUSTIX
www.novell.com/linux/security/advisories/2007_12_sr.htmlVendor AdvisoryX Refsource SUSE
tech.groups.yahoo.com/group/vimdev/message/46627X Refsource MISC

Show all 39 references

marc.info?l=vim-dev&m=117778983714029&w=2Mailing ListX Refsource MLISTExploit
www.redhat.com/support/errata/RHSA-2007-0346.htmlVendor AdvisoryX Refsource REDHAT
tech.groups.yahoo.com/group/vimdev/message/46658X Refsource MISC
exchange.xforce.ibmcloud.com/vulnerabilities/34012VDB EntryX Refsource XF
www.debian.org/security/2007/dsa-1364Vendor AdvisoryX Refsource DEBIAN
tech.groups.yahoo.com/group/vimdev/message/46645X Refsource CONFIRM
secunia.com/advisories/26653Third Party AdvisoryX Refsource SECUNIA
attrition.org/pipermail/vim/2007-May/001614.htmlMailing ListX Refsource VIM
www.attrition.org/pipermail/vim/2007-August/001770.htmlMailing ListX Refsource VIM
www.vim.org/news/news.phpX Refsource CONFIRM
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=238259X Refsource CONFIRM
www.securityfocus.com/bid/23725VDB EntryX Refsource BID
www.securityfocus.com/archive/1/467202/100/0/threadedMailing ListX Refsource BUGTRAQ
tech.groups.yahoo.com/group/vimannounce/message/178Mailing ListX Refsource MLIST
secunia.com/advisories/25255Third Party AdvisoryX Refsource SECUNIAVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9876VDB EntrySignatureX Refsource OVAL
www.mandriva.com/security/advisories?name=MDKSA-2007:101Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/25432Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25367Third Party AdvisoryX Refsource SECUNIA
osvdb.org/36250VDB EntryX Refsource OSVDB
access.redhat.com/errata/RHSA-2007:0346Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=238259REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0346.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-2438REPORT
bugzilla.redhat.com/show_bug.cgi?id=238734REPORT
www.cve.org/CVERecord?id=CVE-2007-2438Advisory
nvd.nist.gov/vuln/detail/CVE-2007-2438Advisory
security-tracker.debian.org/tracker/CVE-2007-2438Advisory

Related vulnerabilities

CVE-2007-2953debianvim+14.18%19y ago31-07-2007 10:00Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.CVE-2001-0408vim_development_groupvim1.67%25y ago18-09-2001 04:00vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes.CVE-2001-0409vim_development_groupvim0.71%25y ago18-09-2001 04:00vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory.CVE-2005-2368debianvim+72.73%21y ago26-07-2005 04:00vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.CVE-2005-0069debianvim+70.36%21y ago29-01-2005 05:00The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files.CVE-2004-1138debianvim+70.41%21y ago22-12-2004 05:00VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.

All vulnerabilities invim

CVE-2007-2438: vim_development_group vim

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References