vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.
{ "binaries": [ { "binary_name": "vim", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-athena", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-athena-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-common", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-common-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-dbg", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-doc", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-gnome", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-gnome-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-gtk", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-gtk-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-gui-common", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-lesstif", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-nox", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-nox-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-runtime", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-tiny", "binary_version": "2:7.4.052-1ubuntu3.1" }, { "binary_name": "vim-tiny-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "vim", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-athena", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-athena-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-athena-py2", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-athena-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-common", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-common-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-doc", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-gnome", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-gnome-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-gnome-py2", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-gnome-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-gtk", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-gtk-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-gtk-py2", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-gtk-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-gtk3", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-gtk3-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-gtk3-py2", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-gtk3-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-gui-common", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-nox", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-nox-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-nox-py2", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-nox-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-runtime", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-tiny", "binary_version": "2:7.4.1689-3ubuntu1.2" }, { "binary_name": "vim-tiny-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.2" } ], "availability": "No subscription required" }