CVE-2004-1138: VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a...

Security readout for executives and security teams

This is a legacy Vim/gVim issue where opening a specially crafted file could cause editor modeline settings to run unintended commands. Business risk is mainly for old systems still running Vim or gVim before 6.3, especially where users inspect untrusted files. Exposure is most plausible on obsolete Linux or Unix systems with Vim/gVim earlier than 6.3. Current source data does not identify affected package versions beyond vendor advisories and the broad upstream version boundary. Treat as a legacy hygiene issue unless old Unix/Linux estates remain in production. Prioritize discovery and remediation where administrators or developers may open untrusted files on sensitive hosts. Mitigation focus: Upgrade Vim/gVim to 6.3 or later where applicable.; Apply relevant vendor security updates from affected distributions.; Check vendor guidance for modeline-related hardening options..

Prepared

Jun 30, 2026, 01:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.