Unscored severity · published Feb 21, 2009
CVE-2008-3076
The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames used by the execute and system…
–
CVSS
9%
EPSS
No
On KEV
Description
The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames used by the execute and system functions within the (1) mz and (2) mc commands, as demonstrated by the netrw.v2 and netrw.v3 test cases. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.0% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VI
Vim · Vim
7.2a.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3076
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3076
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html
marc.info
http://marc.info/?l=bugtraq&m=121494431426308&w=2
Exploit
http://marc.info/?l=oss-security&m=122416184431388&w=2
secunia.com
http://secunia.com/advisories/34418
wiki.rpath.com
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324
More from Vim
9.8
CVE-2020-20703
Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter
9.8
CVE-2022-3520
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765
9.8
CVE-2022-0318
Heap-based Buffer Overflow in vim/vim prior to 8.2
9.8
CVE-2017-6350
An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a…
9.8
CVE-2017-6349
An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a…