Skip to content
Fencer Vulns
medium 6.8

CVE-2008-3432 json

Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute a…

published 2008-10-10 18 y ago modified 2026-06-16 4 mo ago also EUVD-2008-3418

cvss
6.8
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
8.6%
EPSS 8.6% chance of exploitation in 30 days, percentile 95%
public exploits
1
Exploit-DB

Summary

Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case.

Patch / fix

  • vim RHEL 3 1:6.3.046-0.30E.11
  • vim RHEL 4 1:6.3.046-1.el4_7.5z
  • vim-X11 RHEL 3 1:6.3.046-0.30E.11
  • vim-X11 RHEL 4 1:6.3.046-1.el4_7.5z
  • vim-common RHEL 3 1:6.3.046-0.30E.11
  • vim-common RHEL 4 1:6.3.046-1.el4_7.5z
  • vim-minimal RHEL 3 1:6.3.046-0.30E.11
  • vim-minimal RHEL 4 1:6.3.046-1.el4_7.5z

red hat advisories RHSA-2008:0617

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2008-3432 updated

vim: heap buffer overflow in mch_expand_wildcards()

  • Red Hat Desktop version 3 vim 6.3.046-0.30E.11, vim-X11 6.3.046-0.30E.11, vim-common 6.3.046-0.30E.11, vim-minimal 6.3.046-0.30E.11, vim-enhanced 6.3.046-0.30E.11 Red Hat Enterprise Linux AS version 3 vim 6.3.046-0.30E.11, vim-X11 6.3.046-0.30E.11, vim-common 6.3.046-0.30E.11, vim-minimal 6.3.046-0.30E.11, vim-enhanced 6.3.046-0.30E.11 Red Hat Enterprise Linux AS version 4 vim 6.3.046-1.el4_7.5z, vim-X11 6.3.046-1.el4_7.5z, vim-common 6.3.046-1.el4_7.5z, vim-minimal 6.3.046-1.el4_7.5z, vim-enhanced 6.3.046-1.el4_7.5z Red Hat Enterprise Linux Desktop version 4 vim 6.3.046-1.el4_7.5z, vim-X11 6.3.046-1.el4_7.5z, vim-common 6.3.046-1.el4_7.5z, vim-minimal 6.3.046-1.el4_7.5z, vim-enhanced 6.3.046-1.el4_7.5z Red Hat Enterprise Linux ES version 3 vim 6.3.046-0.30E.11, vim-X11 6.3.046-0.30E.11, vim-common 6.3.046-0.30E.11, vim-minimal 6.3.046-0.30E.11, vim-enhanced 6.3.046-0.30E.11 Red Hat Enterprise Linux ES version 4 vim 6.3.046-1.el4_7.5z, vim-X11 6.3.046-1.el4_7.5z, vim-common 6.3.046-1.el4_7.5z, vim-minimal 6.3.046-1.el4_7.5z, vim-enhanced 6.3.046-1.el4_7.5z
    +2 more products
    Red Hat Enterprise Linux WS version 3 vim 6.3.046-0.30E.11, vim-X11 6.3.046-0.30E.11, vim-common 6.3.046-0.30E.11, vim-minimal 6.3.046-0.30E.11, vim-enhanced 6.3.046-0.30E.11 Red Hat Enterprise Linux WS version 4 vim 6.3.046-1.el4_7.5z, vim-X11 6.3.046-1.el4_7.5z, vim-common 6.3.046-1.el4_7.5z, vim-minimal 6.3.046-1.el4_7.5z, vim-enhanced 6.3.046-1.el4_7.5z
    fixed: vendor fix RHSA-2008:0617

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

  1. First public exploit (EDB-32225)
  2. Published

Exploit prediction

8.62% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-32225 Vim - 'mch_expand_wildcards()' Heap Buffer Overflow remote, 2005-01-29

CVSS scores

assigned by version score vector
NVD 2.0 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.