CVE-2007-2953
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier,...
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
- Record
CVE-2007-2953- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
- Record
CVE-2007-2953- Updated
- 2026-11-02
EUVDEUVD-2007-2945 No score
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
- Record
EUVD-2007-2945- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ggw5-mghh-pg96 No score
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier,...
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
- Record
GHSA-ggw5-mghh-pg96- Updated
- 2026-11-02
OSV No score
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
- Record
CVE-2007-2953- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-2953 No score
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
- Record
DEBIAN-CVE-2007-2953- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11497-1 No score
gvim-8.2.3408-1.2 on GA media
These are all security issues fixed in the gvim-8.2.3408-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11497-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
vimDebian:12 |
before 1:7.1-056+1 | 1:7.1-056+1 |
vimDebian:13 |
before 1:7.1-056+1 | 1:7.1-056+1 |
vimDebian:14 |
before 1:7.1-056+1 | 1:7.1-056+1 |
vimDebian:3.1 |
before 1:6.3-071+1sarge2, plus listed versions 1:6.3-071+11:6.3-071+1sarge1 |
1:6.3-071+1sarge2 |
vimDebian:4.0 |
before 1:7.0-122+1etch3, plus listed versions 1:7.0-122+1etch2 |
1:7.0-122+1etch3 |
vimRed Hat:enterprise_linux:5::client |
before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-X11Red Hat:enterprise_linux:5::client |
before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-commonRed Hat:enterprise_linux:5::client |
before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-debuginfoRed Hat:enterprise_linux:5::client |
before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-enhancedRed Hat:enterprise_linux:5::client |
before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
Show 56 moreShow less
| Package | Affected | Fixed |
|---|---|---|
vim-minimalRed Hat:enterprise_linux:5::client |
before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vimRed Hat:enterprise_linux:5::server |
before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-X11Red Hat:enterprise_linux:5::server |
before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-commonRed Hat:enterprise_linux:5::server |
before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-debuginfoRed Hat:enterprise_linux:5::server |
before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-enhancedRed Hat:enterprise_linux:5::server |
before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vim-minimalRed Hat:enterprise_linux:5::server |
before 2:7.0.109-4.el5_2.4z | 2:7.0.109-4.el5_2.4z |
vimRed Hat:enterprise_linux:3::as |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-X11Red Hat:enterprise_linux:3::as |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-commonRed Hat:enterprise_linux:3::as |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-debuginfoRed Hat:enterprise_linux:3::as |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-enhancedRed Hat:enterprise_linux:3::as |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-minimalRed Hat:enterprise_linux:3::as |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vimRed Hat:enterprise_linux:3::desktop |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-X11Red Hat:enterprise_linux:3::desktop |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-commonRed Hat:enterprise_linux:3::desktop |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-debuginfoRed Hat:enterprise_linux:3::desktop |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-enhancedRed Hat:enterprise_linux:3::desktop |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-minimalRed Hat:enterprise_linux:3::desktop |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vimRed Hat:enterprise_linux:3::es |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-X11Red Hat:enterprise_linux:3::es |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-commonRed Hat:enterprise_linux:3::es |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-debuginfoRed Hat:enterprise_linux:3::es |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-enhancedRed Hat:enterprise_linux:3::es |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-minimalRed Hat:enterprise_linux:3::es |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vimRed Hat:enterprise_linux:3::ws |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-X11Red Hat:enterprise_linux:3::ws |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-commonRed Hat:enterprise_linux:3::ws |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-debuginfoRed Hat:enterprise_linux:3::ws |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-enhancedRed Hat:enterprise_linux:3::ws |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vim-minimalRed Hat:enterprise_linux:3::ws |
before 1:6.3.046-0.30E.11 | 1:6.3.046-0.30E.11 |
vimRed Hat:enterprise_linux:4::as |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-X11Red Hat:enterprise_linux:4::as |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-commonRed Hat:enterprise_linux:4::as |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-debuginfoRed Hat:enterprise_linux:4::as |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-enhancedRed Hat:enterprise_linux:4::as |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-minimalRed Hat:enterprise_linux:4::as |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vimRed Hat:enterprise_linux:4::desktop |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-X11Red Hat:enterprise_linux:4::desktop |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-commonRed Hat:enterprise_linux:4::desktop |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-debuginfoRed Hat:enterprise_linux:4::desktop |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-enhancedRed Hat:enterprise_linux:4::desktop |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-minimalRed Hat:enterprise_linux:4::desktop |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vimRed Hat:enterprise_linux:4::es |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-X11Red Hat:enterprise_linux:4::es |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-commonRed Hat:enterprise_linux:4::es |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-debuginfoRed Hat:enterprise_linux:4::es |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-enhancedRed Hat:enterprise_linux:4::es |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-minimalRed Hat:enterprise_linux:4::es |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vimRed Hat:enterprise_linux:4::ws |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-X11Red Hat:enterprise_linux:4::ws |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-commonRed Hat:enterprise_linux:4::ws |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-debuginfoRed Hat:enterprise_linux:4::ws |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-enhancedRed Hat:enterprise_linux:4::ws |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vim-minimalRed Hat:enterprise_linux:4::ws |
before 1:6.3.046-1.el4_7.5z | 1:6.3.046-1.el4_7.5z |
vimopenSUSE:Tumbleweed |
before 8.2.3408-1.2 | 8.2.3408-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2953 is a medium vulnerability (CVSS 6.8) in Vim Development Group Vim, published July 31, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.18%, the 90th percentile. Fixed in vim 1:7.1-056+1.
References
vmware.com/security/advisories/VMSA-2009-0004.html
securityfocus.com/bid/25095
secunia.com/advisories/26822
mandriva.com/security/advisories?name=MDKSA-2007:168
Show 67 moreShow less
issues.rpath.com/browse/RPL-1595
ubuntu.com/usn/usn-505-1
redhat.com/support/errata/RHSA-2008-0580.html
support.avaya.com/elmodocs2/security/ASA-2009-001.htm
vupen.com/english/advisories/2007/2687
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6463
trustix.org/errata/2007/0026
debian.org/security/2007/dsa-1364
novell.com/linux/security/advisories/2007_18_sr.html
attrition.org/pipermail/vim/2007-August/001770.html
exchange.xforce.ibmcloud.com/vulnerabilities/35655
nvd.nist.gov/vuln/detail/CVE-2007-2953
github.com/advisories/GHSA-ggw5-mghh-pg96
security-tracker.debian.org/tracker/CVE-2007-2953
access.redhat.com/errata/RHSA-2008:0580
bugzilla.redhat.com/show_bug.cgi?id=248542
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0580.json
cve.org/CVERecord?id=CVE-2007-2953
suse.com/security/cve/CVE-2007-2438