Every CVE Search/ Get API key

CVE-2004-1138

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file...

7.2 HighFix available

CVE-2004-1138 is a high vulnerability (CVSS 7.2) in Vim Development Group Vim, published December 22, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in vim 1:6.3-046+0sarge1.

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.

Exploit likelihood

0.41%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.

Record
CVE-2004-1138
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.

Record
CVE-2004-1138
Updated
2026-11-02
EUVDEUVD-2004-1136 No score

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.

Record
EUVD-2004-1136
Updated
2026-11-03
GitHub AdvisoriesGHSA-jx5v-4rgm-j8mg No score

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file...

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.

Record
GHSA-jx5v-4rgm-j8mg
Updated
2026-11-02
OSV No score

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.

Record
CVE-2004-1138
Updated
2026-11-02
OSVDEBIAN-CVE-2004-1138 No score

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.

Record
DEBIAN-CVE-2004-1138
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
vim
Debian:12
 before 1:6.3-046+0sarge1
1:6.3-046+0sarge1
vim
Debian:13
 before 1:6.3-046+0sarge1
1:6.3-046+0sarge1
vim
Debian:14
 before 1:6.3-046+0sarge1
1:6.3-046+0sarge1
vim
Red Hat:enterprise_linux:3::as
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-X11
Red Hat:enterprise_linux:3::as
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-common
Red Hat:enterprise_linux:3::as
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-debuginfo
Red Hat:enterprise_linux:3::as
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-enhanced
Red Hat:enterprise_linux:3::as
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-minimal
Red Hat:enterprise_linux:3::as
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim
Red Hat:enterprise_linux:3::desktop
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
Show 41 moreShow less
Affected packages
PackageAffectedFixed
vim-X11
Red Hat:enterprise_linux:3::desktop
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-common
Red Hat:enterprise_linux:3::desktop
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-enhanced
Red Hat:enterprise_linux:3::desktop
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-minimal
Red Hat:enterprise_linux:3::desktop
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim
Red Hat:enterprise_linux:3::es
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-X11
Red Hat:enterprise_linux:3::es
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-common
Red Hat:enterprise_linux:3::es
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-debuginfo
Red Hat:enterprise_linux:3::es
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-enhanced
Red Hat:enterprise_linux:3::es
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-minimal
Red Hat:enterprise_linux:3::es
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim
Red Hat:enterprise_linux:3::ws
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-X11
Red Hat:enterprise_linux:3::ws
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-common
Red Hat:enterprise_linux:3::ws
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-debuginfo
Red Hat:enterprise_linux:3::ws
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-enhanced
Red Hat:enterprise_linux:3::ws
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim-minimal
Red Hat:enterprise_linux:3::ws
 before 1:6.3.046-0.30E.1
1:6.3.046-0.30E.1
vim
Red Hat:enterprise_linux:4::as
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-X11
Red Hat:enterprise_linux:4::as
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-common
Red Hat:enterprise_linux:4::as
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-debuginfo
Red Hat:enterprise_linux:4::as
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-enhanced
Red Hat:enterprise_linux:4::as
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-minimal
Red Hat:enterprise_linux:4::as
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim
Red Hat:enterprise_linux:4::desktop
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-X11
Red Hat:enterprise_linux:4::desktop
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-common
Red Hat:enterprise_linux:4::desktop
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-enhanced
Red Hat:enterprise_linux:4::desktop
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-minimal
Red Hat:enterprise_linux:4::desktop
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim
Red Hat:enterprise_linux:4::es
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-X11
Red Hat:enterprise_linux:4::es
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-common
Red Hat:enterprise_linux:4::es
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-debuginfo
Red Hat:enterprise_linux:4::es
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-enhanced
Red Hat:enterprise_linux:4::es
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-minimal
Red Hat:enterprise_linux:4::es
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim
Red Hat:enterprise_linux:4::ws
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-X11
Red Hat:enterprise_linux:4::ws
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-common
Red Hat:enterprise_linux:4::ws
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-debuginfo
Red Hat:enterprise_linux:4::ws
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-enhanced
Red Hat:enterprise_linux:4::ws
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4
vim-minimal
Red Hat:enterprise_linux:4::ws
 before 1:6.3.046-0.40E.4
1:6.3.046-0.40E.4

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 20 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open