{"id":"CVE-2002-1377","url":"https://www.cyber-defence.io/tools/cve/CVE-2002-1377","generatedAt":"2026-10-27T19:37:05.614Z","title":"vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to edit a malicious file, as demonstrated using mutt.","description":"vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to edit a malicious file, as demonstrated using mutt.","published":"2002-12-23T05:00:00.000Z","lastModified":"2026-06-16T21:59:13.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":4.6,"severity":"MEDIUM","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P"},"cwe":[],"affected":["vim development group/vim"],"epss":{"score":0.00473,"percentile":0.40665,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.47%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000812","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-December/002948.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108077992208690&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55700","source":"cve@mitre.org"},{"url":"http://www.guninski.com/vim1.html","tags":["Patch","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:012","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-297.html","tags":["Patch","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-302.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6384","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10835","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-December/002948.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108077992208690&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.guninski.com/vim1.html","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-297.html","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-302.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10835","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-1377","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}