CVE-2004-1138
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file...
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.
Exploit likelihood
What each source reports
NVD Score used
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.
- Record
CVE-2004-1138- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.
- Record
CVE-2004-1138- Updated
- 2026-11-02
EUVDEUVD-2004-1136 No score
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.
- Record
EUVD-2004-1136- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jx5v-4rgm-j8mg No score
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file...
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.
- Record
GHSA-jx5v-4rgm-j8mg- Updated
- 2026-11-02
OSV No score
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.
- Record
CVE-2004-1138- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-1138 No score
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.
- Record
DEBIAN-CVE-2004-1138- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
vimDebian:12 |
before 1:6.3-046+0sarge1 | 1:6.3-046+0sarge1 |
vimDebian:13 |
before 1:6.3-046+0sarge1 | 1:6.3-046+0sarge1 |
vimDebian:14 |
before 1:6.3-046+0sarge1 | 1:6.3-046+0sarge1 |
vimRed Hat:enterprise_linux:3::as |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-X11Red Hat:enterprise_linux:3::as |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-commonRed Hat:enterprise_linux:3::as |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-debuginfoRed Hat:enterprise_linux:3::as |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-enhancedRed Hat:enterprise_linux:3::as |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-minimalRed Hat:enterprise_linux:3::as |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vimRed Hat:enterprise_linux:3::desktop |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
Show 41 moreShow less
| Package | Affected | Fixed |
|---|---|---|
vim-X11Red Hat:enterprise_linux:3::desktop |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-commonRed Hat:enterprise_linux:3::desktop |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-debuginfoRed Hat:enterprise_linux:3::desktop |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-enhancedRed Hat:enterprise_linux:3::desktop |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-minimalRed Hat:enterprise_linux:3::desktop |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vimRed Hat:enterprise_linux:3::es |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-X11Red Hat:enterprise_linux:3::es |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-commonRed Hat:enterprise_linux:3::es |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-debuginfoRed Hat:enterprise_linux:3::es |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-enhancedRed Hat:enterprise_linux:3::es |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-minimalRed Hat:enterprise_linux:3::es |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vimRed Hat:enterprise_linux:3::ws |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-X11Red Hat:enterprise_linux:3::ws |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-commonRed Hat:enterprise_linux:3::ws |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-debuginfoRed Hat:enterprise_linux:3::ws |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-enhancedRed Hat:enterprise_linux:3::ws |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vim-minimalRed Hat:enterprise_linux:3::ws |
before 1:6.3.046-0.30E.1 | 1:6.3.046-0.30E.1 |
vimRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-X11Red Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-commonRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-enhancedRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-minimalRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vimRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-X11Red Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-commonRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-enhancedRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-minimalRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vimRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-X11Red Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-commonRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-enhancedRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-minimalRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vimRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-X11Red Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-commonRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-enhancedRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
vim-minimalRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 1:6.3.046-0.40E.4 | 1:6.3.046-0.40E.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1138 is a high vulnerability (CVSS 7.2) in Vim Development Group Vim, published December 22, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in vim 1:6.3-046+0sarge1.
References
marc.info?l=bugtraq&m=110313588125609&w=2
gentoo.org/security/en/glsa/glsa-200412-10.xml
exchange.xforce.ibmcloud.com/vulnerabilities/18503
bugzilla.fedora.us/show_bug.cgi?id=2343
redhat.com/support/errata/RHSA-2005-036.html
Show 20 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9571
nvd.nist.gov/vuln/detail/CVE-2004-1138
github.com/advisories/GHSA-jx5v-4rgm-j8mg
security-tracker.debian.org/tracker/CVE-2004-1138
access.redhat.com/errata/RHSA-2005:010
bugzilla.redhat.com/show_bug.cgi?id=142444
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_010.json
cve.org/CVERecord?id=CVE-2004-1138
bugs.debian.org/cgi-bin/bugreport.cgi?bug=289560