tocsin

Debian/vim: unknown

The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) "D" (delete) command or (2) b:netrw_

Action: Upgrade vim to 2:7.2.148-1 or later.

Affected

introducedfixedlast affected
02:7.2.148-1-

Fixed versions

2:7.2.148-1

Sources

published · modified · JSON