CVE-2007-2438

Exp

The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.

Published: 2007-05-02 Last update: 2026-04-23 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2007-2438 is rated High Exploit Risk (73.7/100): CVSS High severity, with medium exploitation likelihood (EPSS 3.50%). Core evidence: 1 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2007-2438

EDB-ID Source Kind Published Link
nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2007-2438

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-03-26 5.85% 3.50% -2.35%
2 2026-03-02 13.79% 5.85% -7.94%
3 2025-12-19 13.79%

Full EPSS history (17 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2007-2438

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
7.6 2.0 HIGH
AV:N/AC:H/Au:N/C:C/I:C/A:C Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:H)
Exploitation requires uncommon or highly specific conditions.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:C)
Complete confidentiality impact.
Integrity impact (I:C)
Complete integrity impact.
Availability impact (A:C)
Complete availability impact.
4.9 10.0 [email protected]

Weakness enumeration for CVE-2007-2438

OS Trackers for CVE-2007-2438

vendor priority summary link
debian low CVE-2007-2438 low priority: Debian including 1 source packages (vim), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2007-2438
redhat medium https://access.redhat.com/security/cve/CVE-2007-2438
suse high CVE-2007-2438 severity important: SUSE including 23 source package names (gvim-7.2-8.15.2, gvim-7.2-8.8, …), 31 product×package rows across 8 product lines (SUSE Linux Enterprise Server 11 SP1, SUSE Linux Enterprise Server 11 SP2, … (8 product lines)): Fixed 31. https://www.suse.com/security/cve/CVE-2007-2438/
ubuntu medium CVE-2007-2438 medium priority: Ubuntu including 1 source packages (vim), 4 status rows across 4 suites (dapper, edgy, feisty, upstream): released 2, needs-triage 1, not-affected 1. https://ubuntu.com/security/CVE-2007-2438

NVD evaluator notes for CVE-2007-2438

Impact: Successful exploitation requires that the "modelines" option is enabled and the user is tricked into opening a malicious file.

Solution: The vendor has addressed this issue with the following patches: VIM Development Group VIM 7.0- VIM Development Group patch 7.0.234 ftp://ftp.vim.org/pub/vim/patches/7.0/7.0.234 VIM Development Group patch 7.0.235 ftp://ftp.vim.org/pub/vim/patches/7.0/7.0.235

Affected software / configurations for CVE-2007-2438

Vendor Product Version Raw CPE
vim_development_group vim 7.0 cpe:2.3:a:vim_development_group:vim:7.0:*:*:*:*:*:*:*

References for CVE-2007-2438

URL Tags
http://attrition.org/pipermail/vim/2007-May/001614.html
http://marc.info/?l=vim-dev&m=117762581821298&w=2
http://marc.info/?l=vim-dev&m=117778983714029&w=2 Exploit
http://osvdb.org/36250
http://secunia.com/advisories/25024 Vendor Advisory
http://secunia.com/advisories/25159 Vendor Advisory
http://secunia.com/advisories/25182 Vendor Advisory
http://secunia.com/advisories/25255 Vendor Advisory
http://secunia.com/advisories/25367
http://secunia.com/advisories/25432
http://secunia.com/advisories/26653
http://tech.groups.yahoo.com/group/vimannounce/message/178
http://tech.groups.yahoo.com/group/vimdev/message/46627
http://tech.groups.yahoo.com/group/vimdev/message/46645
http://tech.groups.yahoo.com/group/vimdev/message/46658
http://www.attrition.org/pipermail/vim/2007-August/001770.html
http://www.debian.org/security/2007/dsa-1364
http://www.mandriva.com/security/advisories?name=MDKSA-2007:101
http://www.novell.com/linux/security/advisories/2007_12_sr.html
http://www.redhat.com/support/errata/RHSA-2007-0346.html
http://www.securityfocus.com/archive/1/467202/100/0/threaded
http://www.securityfocus.com/bid/23725
http://www.securitytracker.com/id?1018035
http://www.trustix.org/errata/2007/0017/
http://www.ubuntu.com/usn/usn-463-1
http://www.vim.org/news/news.php
http://www.vupen.com/english/advisories/2007/1599
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=238259
https://exchange.xforce.ibmcloud.com/vulnerabilities/34012
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9876
cvelogic Threat Intelligence