Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-u31g-svbe-h3as
SummaryVim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5) netrw. NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298. NOTE: the zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075.
Aliases
0
alias CVE-2008-2712
Fixed_packages
0
url pkg:deb/debian/vim@1:7.1.314-3?distro=trixie
purl pkg:deb/debian/vim@1:7.1.314-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vim@1:7.1.314-3%3Fdistro=trixie
1
url pkg:deb/debian/vim@2:8.2.2434-3%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/vim@2:8.2.2434-3%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1d9p-66h6-fbar
1
vulnerability VCID-1ef9-jhca-vfeg
2
vulnerability VCID-1gst-ev7m-c3cj
3
vulnerability VCID-1kbw-zfrc-w7gz
4
vulnerability VCID-1kfp-e45g-budt
5
vulnerability VCID-1kxn-f5y3-wfhg
6
vulnerability VCID-1u4v-q5sa-uben
7
vulnerability VCID-1wb3-q7mj-67eg
8
vulnerability VCID-21th-v7zz-7fgx
9
vulnerability VCID-2cad-1tff-d7bd
10
vulnerability VCID-33vp-n2ex-eucn
11
vulnerability VCID-37wt-gr46-3bfk
12
vulnerability VCID-3jah-u714-m3gd
13
vulnerability VCID-3n8u-q1fu-qbee
14
vulnerability VCID-3t65-uwbj-abfh
15
vulnerability VCID-44hm-r2z7-9kf9
16
vulnerability VCID-466q-u5xw-w3g4
17
vulnerability VCID-46bp-peus-qffx
18
vulnerability VCID-4bz1-8c7q-ekfu
19
vulnerability VCID-4c38-b6tw-ufd9
20
vulnerability VCID-4gbu-7q6y-uyff
21
vulnerability VCID-4n6v-zwra-vkda
22
vulnerability VCID-569k-yq7a-mfdt
23
vulnerability VCID-574e-1ack-pqff
24
vulnerability VCID-5hjk-jbey-y7dj
25
vulnerability VCID-68d3-j6xp-u3fw
26
vulnerability VCID-6tph-4fts-mkds
27
vulnerability VCID-71cb-u7jy-euc4
28
vulnerability VCID-776a-wkg1-p7fq
29
vulnerability VCID-77bk-xfwm-qbh3
30
vulnerability VCID-79p5-rq7j-h3bx
31
vulnerability VCID-7nat-nrts-dyau
32
vulnerability VCID-7syq-qekh-cfc1
33
vulnerability VCID-8337-c76a-gbde
34
vulnerability VCID-85na-u24s-pfed
35
vulnerability VCID-85z2-brt2-ubfa
36
vulnerability VCID-864k-gdw7-gkcg
37
vulnerability VCID-89zf-5yey-9bch
38
vulnerability VCID-96sr-9kny-cbg6
39
vulnerability VCID-9egw-bw85-x7f2
40
vulnerability VCID-9gap-s1a9-aked
41
vulnerability VCID-9wky-hnyq-7qe6
42
vulnerability VCID-9xdf-m4d7-4ubt
43
vulnerability VCID-a1d1-mbqa-x3ee
44
vulnerability VCID-a3u1-4v99-93db
45
vulnerability VCID-ah1v-nzqz-nbhv
46
vulnerability VCID-ahu4-fduj-pkes
47
vulnerability VCID-akgg-asjw-k7fe
48
vulnerability VCID-apkm-mg6q-6kh8
49
vulnerability VCID-aqts-gjq5-kbfc
50
vulnerability VCID-aw2b-1g8c-qbfw
51
vulnerability VCID-b749-1bpr-pqem
52
vulnerability VCID-bb43-ykjv-tbas
53
vulnerability VCID-bfj8-ev52-mbh1
54
vulnerability VCID-bh1y-7m8f-hffe
55
vulnerability VCID-bhjv-t75m-4bbs
56
vulnerability VCID-bqp2-8xpn-h3d6
57
vulnerability VCID-c3fd-ahn6-cygt
58
vulnerability VCID-cdvg-q112-dbby
59
vulnerability VCID-ckkg-gcdh-jqhd
60
vulnerability VCID-cpvv-frpv-vqb4
61
vulnerability VCID-crz8-sgq5-2qg9
62
vulnerability VCID-d7rr-gwb7-xyfq
63
vulnerability VCID-dc46-7wud-37c3
64
vulnerability VCID-dc6a-q91z-pkhc
65
vulnerability VCID-dvr5-sc2w-wkes
66
vulnerability VCID-ead3-d3jj-ckfd
67
vulnerability VCID-efmg-8rp8-fbcd
68
vulnerability VCID-eg5f-mgrf-hff4
69
vulnerability VCID-enyd-59nf-kkf7
70
vulnerability VCID-ffjv-ucya-dyaz
71
vulnerability VCID-frar-y25g-fkcr
72
vulnerability VCID-fxs8-evy3-pyf6
73
vulnerability VCID-gecw-77at-hkhf
74
vulnerability VCID-gfqd-dgep-23h9
75
vulnerability VCID-gmtk-gwvs-pugw
76
vulnerability VCID-gmve-apcr-xqav
77
vulnerability VCID-h5zu-mw4y-83em
78
vulnerability VCID-h93h-421a-xfbd
79
vulnerability VCID-hhc6-edy9-gbdr
80
vulnerability VCID-huux-stsb-a7bj
81
vulnerability VCID-jh9u-sk2h-2kde
82
vulnerability VCID-jp5n-pgfm-wuct
83
vulnerability VCID-jumk-chhp-67e9
84
vulnerability VCID-k8yw-7wcu-bfeg
85
vulnerability VCID-kmwc-jqxg-y3eq
86
vulnerability VCID-knhh-ppe3-jbgd
87
vulnerability VCID-kwgm-3rhn-h3h7
88
vulnerability VCID-m22n-1r95-h7b3
89
vulnerability VCID-maa3-wwya-a7hq
90
vulnerability VCID-mhqq-9mfb-zket
91
vulnerability VCID-mjf3-t8ym-dkfb
92
vulnerability VCID-mvp6-pufw-vuav
93
vulnerability VCID-n4sm-pk7p-r3f5
94
vulnerability VCID-n5w4-tuca-2qe8
95
vulnerability VCID-nahj-kmuw-8fa2
96
vulnerability VCID-ng3y-j7js-c3gq
97
vulnerability VCID-nn4p-n5f8-6bcr
98
vulnerability VCID-npkj-jdnc-9ydn
99
vulnerability VCID-nqca-kmxw-pkeg
100
vulnerability VCID-nubx-6bmu-efhv
101
vulnerability VCID-phqj-cun2-hkga
102
vulnerability VCID-phrf-uytw-rbeb
103
vulnerability VCID-px9g-qxcm-v3gx
104
vulnerability VCID-pxet-3gqq-bbe1
105
vulnerability VCID-pz9z-dw63-mqbt
106
vulnerability VCID-qhqe-x9wc-sqbd
107
vulnerability VCID-qmeg-u6d5-7kbb
108
vulnerability VCID-qn8f-njne-wkea
109
vulnerability VCID-qucp-utsj-pfa9
110
vulnerability VCID-r442-6vcc-43df
111
vulnerability VCID-rdhu-zhd7-pyb8
112
vulnerability VCID-rr79-fdfv-wue4
113
vulnerability VCID-rz5t-meeq-f7a2
114
vulnerability VCID-s3cy-53r2-nkb1
115
vulnerability VCID-sbas-btug-4kbj
116
vulnerability VCID-sbp8-y1ap-kuay
117
vulnerability VCID-sm9x-r28n-puhk
118
vulnerability VCID-smet-j1kp-5qe6
119
vulnerability VCID-sz8c-wy83-gygv
120
vulnerability VCID-t2eu-4ew7-2qfu
121
vulnerability VCID-tmcb-hc51-g3au
122
vulnerability VCID-tsnm-ajh1-zyfp
123
vulnerability VCID-tw37-mcdh-wkhy
124
vulnerability VCID-u9ax-ysjx-4ycw
125
vulnerability VCID-u9xy-qcv3-sugw
126
vulnerability VCID-udj7-hpz9-wkeb
127
vulnerability VCID-uhut-694f-bkd7
128
vulnerability VCID-unp1-s8wm-93en
129
vulnerability VCID-uwhs-7yf5-1qhz
130
vulnerability VCID-uy5m-x1nq-qyc7
131
vulnerability VCID-v24g-61h6-z3e4
132
vulnerability VCID-v346-cdmc-ybfc
133
vulnerability VCID-vb4y-nz7h-6bgf
134
vulnerability VCID-vdb7-jpz3-q7gj
135
vulnerability VCID-vdvr-usd4-hfe1
136
vulnerability VCID-vm7w-cb39-d3ca
137
vulnerability VCID-vmg6-gg3c-hffw
138
vulnerability VCID-vxa4-e153-uqdg
139
vulnerability VCID-w5tv-6rcz-bygx
140
vulnerability VCID-wnse-7k4d-p7c7
141
vulnerability VCID-wuzs-tju6-u3fk
142
vulnerability VCID-x3b9-uvx4-4bb8
143
vulnerability VCID-x8ux-rd5j-c3hc
144
vulnerability VCID-xcx1-q32f-sfcw
145
vulnerability VCID-xfcc-pyvs-rkbn
146
vulnerability VCID-xtv2-cfha-bbax
147
vulnerability VCID-y558-k2kf-2qap
148
vulnerability VCID-y7us-vm3z-2ydu
149
vulnerability VCID-yb9u-zqmf-w7db
150
vulnerability VCID-yfpa-q76u-1ygg
151
vulnerability VCID-yfte-4666-e3bn
152
vulnerability VCID-yhtg-bwc8-x7ew
153
vulnerability VCID-yn5g-hqdf-k7cn
154
vulnerability VCID-ynmk-1f2c-zqcf
155
vulnerability VCID-yyjf-6zxf-dub7
156
vulnerability VCID-zj2p-68h9-kbh2
157
vulnerability VCID-zycg-dh1c-97ea
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vim@2:8.2.2434-3%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/vim@2:9.0.1378-2%2Bdeb12u2?distro=trixie
purl pkg:deb/debian/vim@2:9.0.1378-2%2Bdeb12u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kxn-f5y3-wfhg
1
vulnerability VCID-21th-v7zz-7fgx
2
vulnerability VCID-37wt-gr46-3bfk
3
vulnerability VCID-3jah-u714-m3gd
4
vulnerability VCID-44hm-r2z7-9kf9
5
vulnerability VCID-466q-u5xw-w3g4
6
vulnerability VCID-4c38-b6tw-ufd9
7
vulnerability VCID-4n6v-zwra-vkda
8
vulnerability VCID-68d3-j6xp-u3fw
9
vulnerability VCID-6tph-4fts-mkds
10
vulnerability VCID-77bk-xfwm-qbh3
11
vulnerability VCID-8337-c76a-gbde
12
vulnerability VCID-85na-u24s-pfed
13
vulnerability VCID-96sr-9kny-cbg6
14
vulnerability VCID-aqts-gjq5-kbfc
15
vulnerability VCID-bfj8-ev52-mbh1
16
vulnerability VCID-bqp2-8xpn-h3d6
17
vulnerability VCID-cdvg-q112-dbby
18
vulnerability VCID-d7rr-gwb7-xyfq
19
vulnerability VCID-gmtk-gwvs-pugw
20
vulnerability VCID-gmve-apcr-xqav
21
vulnerability VCID-h5zu-mw4y-83em
22
vulnerability VCID-h93h-421a-xfbd
23
vulnerability VCID-hhc6-edy9-gbdr
24
vulnerability VCID-jumk-chhp-67e9
25
vulnerability VCID-k8yw-7wcu-bfeg
26
vulnerability VCID-mjf3-t8ym-dkfb
27
vulnerability VCID-nahj-kmuw-8fa2
28
vulnerability VCID-ng3y-j7js-c3gq
29
vulnerability VCID-nubx-6bmu-efhv
30
vulnerability VCID-pz9z-dw63-mqbt
31
vulnerability VCID-qucp-utsj-pfa9
32
vulnerability VCID-s3cy-53r2-nkb1
33
vulnerability VCID-sbp8-y1ap-kuay
34
vulnerability VCID-sm9x-r28n-puhk
35
vulnerability VCID-sz8c-wy83-gygv
36
vulnerability VCID-t2eu-4ew7-2qfu
37
vulnerability VCID-u9xy-qcv3-sugw
38
vulnerability VCID-udj7-hpz9-wkeb
39
vulnerability VCID-v24g-61h6-z3e4
40
vulnerability VCID-v346-cdmc-ybfc
41
vulnerability VCID-vdvr-usd4-hfe1
42
vulnerability VCID-vm7w-cb39-d3ca
43
vulnerability VCID-wmgw-22c9-6kfk
44
vulnerability VCID-y558-k2kf-2qap
45
vulnerability VCID-yb9u-zqmf-w7db
46
vulnerability VCID-yn5g-hqdf-k7cn
47
vulnerability VCID-ynmk-1f2c-zqcf
48
vulnerability VCID-yyjf-6zxf-dub7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vim@2:9.0.1378-2%252Bdeb12u2%3Fdistro=trixie
3
url pkg:deb/debian/vim@2:9.1.1230-2?distro=trixie
purl pkg:deb/debian/vim@2:9.1.1230-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kxn-f5y3-wfhg
1
vulnerability VCID-21th-v7zz-7fgx
2
vulnerability VCID-37wt-gr46-3bfk
3
vulnerability VCID-3jah-u714-m3gd
4
vulnerability VCID-466q-u5xw-w3g4
5
vulnerability VCID-68d3-j6xp-u3fw
6
vulnerability VCID-77bk-xfwm-qbh3
7
vulnerability VCID-96sr-9kny-cbg6
8
vulnerability VCID-aqts-gjq5-kbfc
9
vulnerability VCID-fkmm-ehwq-xye9
10
vulnerability VCID-gmtk-gwvs-pugw
11
vulnerability VCID-gmve-apcr-xqav
12
vulnerability VCID-h5zu-mw4y-83em
13
vulnerability VCID-nubx-6bmu-efhv
14
vulnerability VCID-sm9x-r28n-puhk
15
vulnerability VCID-udj7-hpz9-wkeb
16
vulnerability VCID-v24g-61h6-z3e4
17
vulnerability VCID-vdvr-usd4-hfe1
18
vulnerability VCID-y558-k2kf-2qap
19
vulnerability VCID-yn5g-hqdf-k7cn
20
vulnerability VCID-yyjf-6zxf-dub7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vim@2:9.1.1230-2%3Fdistro=trixie
4
url pkg:deb/debian/vim@2:9.2.0524-1?distro=trixie
purl pkg:deb/debian/vim@2:9.2.0524-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vim@2:9.2.0524-1%3Fdistro=trixie
Affected_packages
0
url pkg:rpm/redhat/vim@1:6.0-7?arch=25
purl pkg:rpm/redhat/vim@1:6.0-7?arch=25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5gaz-u5jq-gkbx
1
vulnerability VCID-u31g-svbe-h3as
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/vim@1:6.0-7%3Farch=25
1
url pkg:rpm/redhat/vim@1:6.3.046-0.30E?arch=11
purl pkg:rpm/redhat/vim@1:6.3.046-0.30E?arch=11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5gaz-u5jq-gkbx
1
vulnerability VCID-u31g-svbe-h3as
2
vulnerability VCID-uk67-uv62-quhv
3
vulnerability VCID-x9j8-feju-7kh7
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/vim@1:6.3.046-0.30E%3Farch=11
2
url pkg:rpm/redhat/vim@1:6.3.046-1.el4_7?arch=5z
purl pkg:rpm/redhat/vim@1:6.3.046-1.el4_7?arch=5z
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5gaz-u5jq-gkbx
1
vulnerability VCID-u31g-svbe-h3as
2
vulnerability VCID-uk67-uv62-quhv
3
vulnerability VCID-x9j8-feju-7kh7
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/vim@1:6.3.046-1.el4_7%3Farch=5z
3
url pkg:rpm/redhat/vim@2:7.0.109-4.el5_2?arch=4z
purl pkg:rpm/redhat/vim@2:7.0.109-4.el5_2?arch=4z
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yzh-sauy-xkb2
1
vulnerability VCID-5gaz-u5jq-gkbx
2
vulnerability VCID-cj62-behh-nbbz
3
vulnerability VCID-fdgd-vgt7-5yg9
4
vulnerability VCID-u31g-svbe-h3as
5
vulnerability VCID-uk67-uv62-quhv
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/vim@2:7.0.109-4.el5_2%3Farch=4z
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2712.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2712.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-2712
reference_id
reference_type
scores
0
value 0.16974
scoring_system epss
scoring_elements 0.95096
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-2712
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=451759
reference_id 451759
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=451759
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=486502
reference_id 486502
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=486502
4
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/31911.txt
reference_id CVE-2008-2712;OSVDB-46306
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/31911.txt
5
reference_url https://www.securityfocus.com/bid/29715/info
reference_id CVE-2008-2712;OSVDB-46306
reference_type exploit
scores
url https://www.securityfocus.com/bid/29715/info
6
reference_url https://access.redhat.com/errata/RHSA-2008:0580
reference_id RHSA-2008:0580
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0580
7
reference_url https://access.redhat.com/errata/RHSA-2008:0617
reference_id RHSA-2008:0617
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0617
8
reference_url https://access.redhat.com/errata/RHSA-2008:0618
reference_id RHSA-2008:0618
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0618
Weaknesses
Exploits
0
date_added 2008-06-14
description Vim 7.x - Vim Script Multiple Command Execution Vulnerabilities
required_action null
due_date null
notes null
known_ransomware_campaign_use false
source_date_published 2008-06-14
exploit_type local
platform linux
source_date_updated 2014-03-03
data_source Exploit-DB
source_url https://www.securityfocus.com/bid/29715/info
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.2
Risk_score0.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-u31g-svbe-h3as