CVE-2016-1248 Ubuntu Security Notification for Vim Vulnerability (USN-3139-1)

It was discovered that the Vim text editor did not properly validate values for the 'filetype', 'syntax', and 'keymap' options.

An attacker could trick a user into opening a file with specially crafted modelines and possibly execute arbitrary code with the user's privileges.

Refer to Ubuntu advisory USN-3139-1 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

USN-3139-1: 16.04 (Xenial) on src (vim-common)

USN-3139-1: 16.04 (Xenial) on src (vim)

USN-3139-1: 14.04 (Kylin) on src (vim-gui-common)

USN-3139-1: 14.04 (Kylin) on src (vim-runtime)

USN-3139-1: 16.10 (Yakkety) on src (vim-gui-common)

USN-3139-1: 16.04 (Xenial) on src (vim-gui-common)

USN-3139-1: 16.10 (Yakkety) on src (vim-common)

USN-3139-1: 16.10 (Yakkety) on src (vim)

USN-3139-1: 12.04 (Precise) on src (vim-common)

USN-3139-1: 14.04 (Kylin) on src (vim)

USN-3139-1: 12.04 (Precise) on src (vim-runtime)

USN-3139-1: 12.04 (Precise) on src (vim)

USN-3139-1: 16.04 (Xenial) on src (vim-runtime)

USN-3139-1: 16.10 (Yakkety) on src (vim-runtime)

USN-3139-1: 14.04 (Kylin) on src (vim-common)

USN-3139-1: 12.04 (Precise) on src (vim-gui-common)