Vim Insufficient Shell Escaping Multiple Command Execution Vulnerabilities

Threat level definition

Vim Insufficient Shell Escaping Multiple Command Execution Vulnerabilities

References:

Bug with v_K and potentially K command (Ben Schmidt)
Mac OS X Home Page (Apple)
VIM Homepage (VIM Development Group)
RE: Arbitrary Code Execution in Commands: K, Control-], g] (Michael Wojcik )
Vim: Arbitrary Code Execution in Commands: K, Control-], g] (Jan Minár )
About Security Update 2008-007 (Apple)
ASA-2009-001 - vim security update (RHSA-2008-0617) (Avaya)

Privacy Statement
Copyright 2008, SecurityFocus