CVE-2001-0408: Vim Development Group Vim

Medium severity, CVSS 5.1. EPSS: 1.7% chance of exploitation in the next 30 days.

vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes.

Affected products

• Vim Development Group Vim: version 5.7 only

Published 2001-06-18. Last modified 2026-06-16.