CVE-2001-0408
vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow...
CVE-2001-0408 is a medium vulnerability (CVSS 5.1) in Vim Development Group Vim, published June 18, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.67%, the 76th percentile. No source names a fixed version.
vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes.
Exploit likelihood
What each source reports
NVD Score used
5.1
vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes.
- Record
CVE-2001-0408- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes.
- Record
CVE-2001-0408- Updated
- 2026-11-02
EUVDEUVD-2001-0405 No score
vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes.
- Record
EUVD-2001-0405- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j8qm-vm5m-59fw No score
vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow...
vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes.
- Record
GHSA-j8qm-vm5m-59fw- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
calderasystems.com/support/security/advisories/CSSA-2001-014.0.txt
exchange.xforce.ibmcloud.com/vulnerabilities/6259
redhat.com/support/errata/RHSA-2001-008.html
marc.info?l=bugtraq&m=98593106111968&w=2
securityfocus.com/bid/2510
linux-mandrake.com/en/security/2001/MDKSA-2001-035.php3
novell.com/linux/security/advisories/2001_012_vim.html
nvd.nist.gov/vuln/detail/CVE-2001-0408
github.com/advisories/GHSA-j8qm-vm5m-59fw