CVE-2008-3075

The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a ZIP archive and possibly (2) the filename of the first file in a ZIP archive, which is not properly handled by zip.vim in the VIM ZIP plugin (zipPlugin.vim) v.11 through v.21, as demonstrated by the zipplugin and zipplugin.v2 test cases. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712. NOTE: this issue has the same root cause as CVE-2008-3074. NOTE: due to the complexity of the associated disclosures and the incomplete information related to them, there may be inaccuracies in this CVE description and in external mappings to this identifier.

• CWE-94

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919
• http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html
• http://marc.info/?l=bugtraq&m=121494431426308&w=2
• http://secunia.com/advisories/34418
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:236
• http://www.openwall.com/lists/oss-security/2008/07/07/1Exploit
• http://www.openwall.com/lists/oss-security/2008/07/07/4
• http://www.openwall.com/lists/oss-security/2008/07/08/12
• http://www.openwall.com/lists/oss-security/2008/07/10/7
• http://www.openwall.com/lists/oss-security/2008/07/13/1
• http://www.openwall.com/lists/oss-security/2008/07/15/4Patch
• http://www.openwall.com/lists/oss-security/2008/08/01/1
• http://www.openwall.com/lists/oss-security/2008/10/15/1
• http://www.openwall.com/lists/oss-security/2008/10/20/2
• http://www.rdancer.org/vulnerablevim.htmlExploit, Patch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2008-0580.html
• http://www.securityfocus.com/bid/32463
• https://bugzilla.redhat.com/show_bug.cgi?id=467432
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10246
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919
• http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html
• http://marc.info/?l=bugtraq&m=121494431426308&w=2
• http://secunia.com/advisories/34418
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:236
• http://www.openwall.com/lists/oss-security/2008/07/07/1Exploit
• http://www.openwall.com/lists/oss-security/2008/07/07/4
• http://www.openwall.com/lists/oss-security/2008/07/08/12
• http://www.openwall.com/lists/oss-security/2008/07/10/7
• http://www.openwall.com/lists/oss-security/2008/07/13/1
• http://www.openwall.com/lists/oss-security/2008/07/15/4Patch
• http://www.openwall.com/lists/oss-security/2008/08/01/1
• http://www.openwall.com/lists/oss-security/2008/10/15/1
• http://www.openwall.com/lists/oss-security/2008/10/20/2
• http://www.rdancer.org/vulnerablevim.htmlExploit, Patch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2008-0580.html
• http://www.securityfocus.com/bid/32463
• https://bugzilla.redhat.com/show_bug.cgi?id=467432
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10246

Published

Feb 21, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-3069Multiple cross-site scripting (XSS) vulnerabilities in MyBB …
• CVE-2008-3070Unspecified vulnerability in inc/datahandler/user.php in MyB…
• CVE-2008-3071Directory traversal vulnerability in inc/class_language.php …
• CVE-2008-3072Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x bef…
• CVE-2008-3073Unspecified vulnerability in Simple Machines Forum (SMF) 1.1…
• CVE-2008-3074The shellescape function in Vim 7.0 through 7.2, including 7…
• CVE-2008-3076The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user…
• CVE-2008-3077arch/x86/kernel/ptrace.c in the Linux kernel before 2.6.25.1…
• CVE-2008-3078Opera before 9.51 does not properly manage memory within fun…
• CVE-2008-3079Unspecified vulnerability in Opera before 9.51 on Windows al…
• CVE-2008-3080Cross-site request forgery (CSRF) vulnerability in admin.php…
• CVE-2008-3081Multiple unspecified "input validation" vulnerabilities in t…