CVE-2007-2953
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier,...
6.8 MediumFix available
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
Exploit likelihood
4.18%Down 8.1 points since Feb 4, 2022
What each source reports
NVD Score used
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
- Record
CVE-2007-2953- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
- Record
CVE-2007-2953- Updated
- 2026-11-02
EUVDEUVD-2007-2945No score
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
- Record
EUVD-2007-2945- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ggw5-mghh-pg96No score
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier,...
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
- Record
GHSA-ggw5-mghh-pg96- Updated
- 2026-11-02
OSVNo score
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
- Record
CVE-2007-2953- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-2953No score
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
- Record
DEBIAN-CVE-2007-2953- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11497-1No score
gvim-8.2.3408-1.2 on GA media
These are all security issues fixed in the gvim-8.2.3408-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11497-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
vimDebian:12 | before 1:7.1-056+1 | 1:7.1-056+1 |
vimDebian:13 | before 1:7.1-056+1 | 1:7.1-056+1 |
vimDebian:14 | before 1:7.1-056+1 | 1:7.1-056+1 |
vimDebian:3.1 From an advisory covering 2 CVEs | before 1:6.3-071+1sarge2, plus listed versions 1:6.3-071+11:6.3-071+1sarge1 | 1:6.3-071+1sarge2 |
vimDebian:4.0 From an advisory covering 2 CVEs | before 1:7.0-122+1etch3, plus listed versions 1:7.0-122+1etch2 | 1:7.0-122+1etch3 |
vimRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-X11Red Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-commonRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-enhancedRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
Show 56 moreShow less
| Package | Affected | Fixed |
|---|---|---|
vim-minimalRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vimRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-X11Red Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-commonRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-enhancedRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-minimalRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vimRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-X11Red Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-commonRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-enhancedRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-minimalRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vimRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-X11Red Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-commonRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-enhancedRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-minimalRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vimRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-X11Red Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-commonRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-enhancedRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-minimalRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vimRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-X11Red Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-commonRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-enhancedRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-minimalRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vimRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-X11Red Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-commonRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-enhancedRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-minimalRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vimRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-X11Red Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-commonRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-enhancedRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-minimalRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vimRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-X11Red Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-commonRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-enhancedRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-minimalRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vimRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-X11Red Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-commonRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-enhancedRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-minimalRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vimopenSUSE:Tumbleweed From an advisory covering 7 CVEs | before 8.2.3408-1.2 | 8.2.3408-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2953 is a medium vulnerability (CVSS 6.8) in Vim Development Group Vim, published July 31, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.18%, the 91st percentile. Fixed in vim 1:7.1-056+1.
References
vmware.com/security/advisories/VMSA-2009-0004.html
securityfocus.com/bid/25095
secunia.com/advisories/26822
mandriva.com/security/advisories?name=MDKSA-2007:168
Show 67 moreShow less
issues.rpath.com/browse/RPL-1595
ubuntu.com/usn/usn-505-1
redhat.com/support/errata/RHSA-2008-0580.html
support.avaya.com/elmodocs2/security/ASA-2009-001.htm
vupen.com/english/advisories/2007/2687
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6463
trustix.org/errata/2007/0026
debian.org/security/2007/dsa-1364
novell.com/linux/security/advisories/2007_18_sr.html
attrition.org/pipermail/vim/2007-August/001770.html
exchange.xforce.ibmcloud.com/vulnerabilities/35655
nvd.nist.gov/vuln/detail/CVE-2007-2953
github.com/advisories/GHSA-ggw5-mghh-pg96
security-tracker.debian.org/tracker/CVE-2007-2953
access.redhat.com/errata/RHSA-2008:0580
bugzilla.redhat.com/show_bug.cgi?id=248542
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0580.json
cve.org/CVERecord?id=CVE-2007-2953
suse.com/security/cve/CVE-2007-2438