Date: Tue, 8 Jul 2008 13:53:48 -0400 (EDT) From: "Steven M. Christey" <coley@...us.mitre.org> To: Jonathan Smith <smithj@...ethemallocs.com> cc: vim_dev@...glegroups.com, "Steven M. Christey" <coley@...us.mitre.org>, "Charles E Campbell, Jr" <drchip@...pbellfamily.biz>, oss-security@...ts.openwall.com Subject: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 On Mon, 7 Jul 2008, Jonathan Smith wrote: > Steve, could we get CVEs assigned, please? I'd imagine we'd need three; > one for the tarplugin issue, one for the zipplugin, and one for the > netrw issues (which are similar enough to probably justify lumping them > together). CVE-2008-3074 - tarplugin CVE-2008-3075 - zipplugin CVE-2008-3076 - netrw issues These will be filled in later. - Steve
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ