{"schemaVersion":3,"id":"CVE-2008-2712","aliases":["DEBIAN-CVE-2008-2712","DTSA-143-1"],"status":"published","duplicateOf":null,"title":null,"description":"Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5) netrw.  NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298.  NOTE: the zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075.","dates":{"published":"2008-06-16T21:00:00.000Z","modified":"2024-08-07T09:14:14.550Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.3,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.15044,"percentile":0.96702,"severity":"medium","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.15044},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.15044,"percentile":0.96702}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.15044,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.15044,"percentile":0.96702}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"31911","name":"Vim 7.x - Vim Script Multiple Command Execution Vulnerabilities","source":"exploit-database","url":"https://www.exploit-db.com/exploits/31911","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"local","platforms":["linux"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"local","platform":"linux","file":"exploits/linux/local/31911.txt","codes":["CVE-2008-2712","OSVDB-46306"]},"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.06","noFixRecorded":false,"fixedIn":null},{"text":"7.10","noFixRecorded":false,"fixedIn":null},{"text":"8.04","noFixRecorded":false,"fixedIn":null},{"text":"8.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.06 | 7.10 | 8.04 | 8.10","eol":{"isEol":true,"eolDate":"2011-06-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"6.06","label":"6.06 'Dapper Drake' (LTS)","eolFrom":"2011-06-01T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"6.06.2"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"vim","name":"vim","label":"vim","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/vim","purlType":"deb","versions":[{"text":"< 1:7.1.314-3","noFixRecorded":false,"fixedIn":null},{"text":"< 1:7.1.293-3+lenny1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:7.1.314-3 | < 1:7.1.293-3+lenny1","eol":null,"hubHref":null},{"vendor":"vim","product":"vim","name":"vim","label":"vim","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 6.4","noFixRecorded":false,"fixedIn":null},{"text":"≥ 7.0, ≤ 7.1.314","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 6.4 | ≥ 7.0, ≤ 7.1.314","eol":null,"hubHref":"/vendor/vim/vim"}],"affectedCount":3,"eol":{"hasEol":true,"count":1},"references":[{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","label":"www.vmware.com/security/advisories/VMSA-2009-0004.html","hostname":"www.vmware.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","label":"lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0618.html","label":"www.redhat.com/support/errata/RHSA-2008-0618.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.rdancer.org/vulnerablevim.html","label":"www.rdancer.org/vulnerablevim.html","hostname":"www.rdancer.org","tags":["X Refsource MISC","Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-712-1","label":"www.ubuntu.com/usn/USN-712-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6238","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6238","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31681","label":"www.securityfocus.com/bid/31681","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43083","label":"exchange.xforce.ibmcloud.com/vulnerabilities/43083","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32858","label":"secunia.com/advisories/32858","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/33410","label":"secunia.com/advisories/33410","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","label":"lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE","Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0580.html","label":"www.redhat.com/support/errata/RHSA-2008-0580.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm","label":"support.avaya.com/elmodocs2/security/ASA-2009-001.htm","hostname":"support.avaya.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34418","label":"secunia.com/advisories/34418","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2009/0904","label":"www.vupen.com/english/advisories/2009/0904","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0033","label":"www.vupen.com/english/advisories/2009/0033","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495319/100/0/threaded","label":"www.securityfocus.com/archive/1/495319/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493353/100/0/threaded","label":"www.securityfocus.com/archive/1/493353/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11109","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11109","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","label":"www.securityfocus.com/archive/1/502322/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory","VDB Entry"]},{"url":"http://www.openwall.com/lists/oss-security/2008/06/16/2","label":"www.openwall.com/lists/oss-security/2008/06/16/2","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=121494431426308&w=2","label":"marc.info?l=bugtraq&m=121494431426308&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1851/references","label":"www.vupen.com/english/advisories/2008/1851/references","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm","label":"support.avaya.com/elmodocs2/security/ASA-2008-457.htm","hostname":"support.avaya.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30731","label":"secunia.com/advisories/30731","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/32222","label":"secunia.com/advisories/32222","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://support.apple.com/kb/HT4077","label":"support.apple.com/kb/HT4077","hostname":"support.apple.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2622","label":"issues.rpath.com/browse/RPL-2622","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM","Broken Link"]},{"url":"http://securityreason.com/securityalert/3951","label":"securityreason.com/securityalert/3951","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:236","label":"www.mandriva.com/security/advisories?name=MDVSA-2008:236","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","label":"www.vupen.com/english/advisories/2008/2780","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/1","label":"www.openwall.com/lists/oss-security/2008/10/15/1","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32864","label":"secunia.com/advisories/32864","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.securitytracker.com/id?1020293","label":"www.securitytracker.com/id?1020293","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","label":"lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE","Mailing List","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","label":"support.apple.com/kb/HT3216","hostname":"support.apple.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29715","label":"www.securityfocus.com/bid/29715","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0247","label":"wiki.rpath.com/Advisories:rPSA-2008-0247","hostname":"wiki.rpath.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0617.html","label":"www.redhat.com/support/errata/RHSA-2008-0617.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493352/100/0/threaded","label":"www.securityfocus.com/archive/1/493352/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory","VDB Entry"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2008-2712","label":"security-tracker.debian.org/tracker/CVE-2008-2712","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-1733-1","RHSA-2008:0580","RHSA-2008:0617","RHSA-2008:0618"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2008-06-16T21:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T09:14:14.550Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:05:57.211Z","stale":false,"partial":false}}