vim -- Improper Input Validation in Vim

2025-03-10 · CVE-2025-27423 · VuXML entry

[email protected] reports: Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or uncompressed) tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the is not sanitized and is taken literally from the tar archive. This allows to execute shellcommands via special crafted tar …

Affected versions

• vim < 9.1.1164
• vim-gtk2 < 9.1.1164
• vim-gtk3 < 9.1.1164
• vim-motif < 9.1.1164
• vim-tiny < 9.1.1164
• vim-x11 < 9.1.1164

By system

0 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.