CVE-2005-2368: Vim Development Group Vim

High severity, CVSS 9.3. EPSS: 2.7% chance of exploitation in the next 30 days.

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

Affected products

• Vim Development Group Vim: version 6.3 only; version 6.3.011 only; version 6.3.025 only; version 6.3.030 only; version 6.3.044 only; version 6.3.081 only

Published 2005-07-26. Last modified 2026-06-16.