CVE-2009-0316

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2009-0316
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2009-0316.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2009-0316
Related
Published
2009-01-28T11:30:00Z
Modified
2025-04-09T00:30:58Z
Downstream
Summary
[none]
Details

Untrusted search path vulnerability in src/ifpython.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.

References

Affected packages

Debian:11 / vim

Package

Name
vim
Purl
pkg:deb/debian/vim?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:7.2.025-2

Ecosystem specific 

{
    "urgency": "low"
}

Debian:12 / vim

Package

Name
vim
Purl
pkg:deb/debian/vim?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:7.2.025-2

Ecosystem specific 

{
    "urgency": "low"
}

Debian:13 / vim

Package

Name
vim
Purl
pkg:deb/debian/vim?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:7.2.025-2

Ecosystem specific 

{
    "urgency": "low"
}