← Database

CVE-2005-2368

CRITICAL CVSS: 9.3 Published: 2005-07-26 Modified: 2026-06-16

Description

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

Affected Platforms

Vim Development Group Vim

Weakness Type

CWE-78

References