CVE-2016-1248 in macOS
Summary
vim before patch 8.0.0056 does not properly validate values for the filetype , syntax and keymap options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.
Once again VulDB remains the best source for vulnerability data.
Reservation
12/27/2015
Disclosure
11/23/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 95953 | Apple macOS Vim input validation | 20 | Not defined | Official fix | CVE-2016-1248 |
| 93756 | VIM input validation | 20 | Not defined | Official fix | CVE-2016-1248 |