QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2019-12735

Back to search

CVE-2019-12735

Published: Jun 5, 2019

Modified: Nov 11, 2025

PUBLISHED

Description

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim.

VendorProductVersions

n/a

n/a

affected
n/a

References

FEDORA-2019-d79f89346c
vendor-advisory
USN-4016-1
vendor-advisory
USN-4016-2
vendor-advisory
108724
vdb-entry
FEDORA-2019-dcd49378b8
vendor-advisory
openSUSE-SU-2019:1551
vendor-advisory
openSUSE-SU-2019:1562
vendor-advisory
openSUSE-SU-2019:1561
vendor-advisory
DSA-4467
vendor-advisory
RHSA-2019:1619
vendor-advisory
RHSA-2019:1774
vendor-advisory
RHSA-2019:1793
vendor-advisory
openSUSE-SU-2019:1759
vendor-advisory
openSUSE-SU-2019:1796
vendor-advisory
DSA-4487
vendor-advisory
RHSA-2019:1947
vendor-advisory
openSUSE-SU-2019:1997
vendor-advisory
GLSA-202003-04
vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now