Ò»¡¢Îó²î¸ÅÊö
Îó²îÃû³Æ | Vim modelineÏÂÁîÖ´ÐÐÎó²î |
CVE ID | CVE-2026-34714 |
Îó²îÀàÐÍ | ÏÂÁî×¢Èë | ·¢Ã÷ʱ¼ä | 2026-3-31 |
Îó²îÆÀ·Ö | 9.2 | Îó²îÆ·¼¶ | ÑÏÖØ |
¹¥»÷ÏòÁ¿ | ÍâµØ | ËùÐèȨÏÞ | ÎÞ |
ʹÓÃÄÑ¶È | µÍ | Óû§½»»¥ | ²»ÐèÒª |
PoC/EXP | δ¹ûÕæ | ÔÚҰʹÓà | δ·¢Ã÷ |
VimÊÇÒ»¿îÆÕ±éʹÓõĿªÔ´Îı¾±à¼Æ÷£¬£¬£¬£¬£¬£¬£¬Ö§³Ö¶àƽ̨ÔËÐУ¬£¬£¬£¬£¬£¬£¬¾ß±¸¸ßЧ±à¼¡¢¾ç±¾À©Õ¹¼°¸»ºñ²å¼þÉú̬µÈÌØÕ÷¡£¡£¡£¡£¡£Æämodeline¡¢autocmdµÈ»úÖÆ¿ÉʵÏÖ×Ô¶¯»¯ÉèÖÃÓëÐÐΪ¿ØÖÆ£¬£¬£¬£¬£¬£¬£¬ÆÕ±éÓ¦ÓÃÓÚ¿ª·¢¡¢ÔËά¼°ÏµÍ³ÖÎÀí³¡¾°£¬£¬£¬£¬£¬£¬£¬ÊÇÀàUnixϵͳÖеĽ¹µã¹¤¾ßÖ®Ò»¡£¡£¡£¡£¡£
2026Äê3ÔÂ31ÈÕ£¬£¬£¬£¬£¬£¬£¬918²©ÌìÌÃÇå¾²Ó¦¼±ÏìÓ¦ÖÐÐÄ£¨VSRC£©¼à²âµ½Vim modelineÏÂÁîÖ´ÐÐÎó²î¡£¡£¡£¡£¡£¸ÃÎó²îÔ´ÓÚtabpanelÑ¡ÏîȱʧP_MLE±ê¼Ç£¬£¬£¬£¬£¬£¬£¬µ¼ÖÂmodeline¿ÉÒÔ×¢Èë%{expr}±í´ïʽ¶øÎÞÐèÆôÓÃmodelineexpr£¬£¬£¬£¬£¬£¬£¬´Ó¶øÈƹýÇå¾²ÏÞÖÆ¡£¡£¡£¡£¡£Í¬Ê±£¬£¬£¬£¬£¬£¬£¬autocmd_add()º¯ÊýȱÉÙcheck_secure()УÑ飬£¬£¬£¬£¬£¬£¬Ê¹¹¥»÷ÕßÄܹ»ÔÚsandboxÇéÐÎÖÐ×¢²á×Ô¶¯ÏÂÁî²¢ÔÚÍ˳öºóÖ´ÐС£¡£¡£¡£¡£¹¥»÷Õß¿Éͨ¹ý½á¹¹¶ñÒâÎļþÓÕµ¼Óû§·¿ª£¬£¬£¬£¬£¬£¬£¬ÔÚÎÞÐèÌØÊâ½»»¥µÄÇéÐÎÏ´¥·¢í§ÒâOSÏÂÁîÖ´ÐУ¬£¬£¬£¬£¬£¬£¬¼Ì¶ø»ñÈ¡Óû§È¨ÏÞ¡¢Ö´ÐжñÒâ²Ù×÷»ò½øÒ»²½ºáÏòÒƶ¯¡£¡£¡£¡£¡£¸ÃÎÊÌâ¿ÉÄܵ¼ÖÂÖ÷»ú±»ÍêÈ«¿ØÖÆ£¬£¬£¬£¬£¬£¬£¬²¢¿ÉÄÜÎ¥·´Êý¾ÝÇå¾²¼°ºÏ¹æÒªÇ󣬣¬£¬£¬£¬£¬£¬¶ÔÖÕ¶ËÓû§¼°ÆóÒµÇéÐÎÔì³ÉÑÏÖØÇ徲Σº¦¡£¡£¡£¡£¡£
¶þ¡¢Ó°Ïì¹æÄ£
Vim < 9.2.0172
Èý¡¢Çå¾²²½·¥
3.1 Éý¼¶°æ±¾
¹Ù·½ÒÑÐû²¼ÐÞ¸´²¹¶¡£¬£¬£¬£¬£¬£¬£¬ÒÔÐÞ¸´¸ÃÎó²î¡£¡£¡£¡£¡£
ÏÂÔØÁ´½Ó£ºhttps://github.com/vim/vim/tags/
3.2 ÔÝʱ²½·¥
ÔÝÎÞ¡£¡£¡£¡£¡£
3.3 ͨÓý¨Òé
? °´ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬£¬£¬£¬£¬£¬ïÔÌϵͳÎó²î£¬£¬£¬£¬£¬£¬£¬ÌáÉýЧÀÍÆ÷µÄÇå¾²ÐÔ¡£¡£¡£¡£¡£? ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬£¬£¬£¬£¬£¬£¬Ð޸ķÀ»ðǽսÂÔ£¬£¬£¬£¬£¬£¬£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻòЧÀÍ£¬£¬£¬£¬£¬£¬£¬ïÔ̽«Î£ÏÕЧÀÍ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬£¬£¬£¬£¬£¬£¬ïÔ̹¥»÷Ãæ¡£¡£¡£¡£¡£? ʹÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬£¬£¬£¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£¡£¡£¡£¡£? ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬£¬£¬£¬£¬£¬ÆôÓöàÒòËØÈÏÖ¤»úÖƺÍ×îСȨÏÞÔÔò£¬£¬£¬£¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏ޶ȡ£¡£¡£¡£¡£? ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£¡£¡£¡£¡£
3.4 ²Î¿¼Á´½Ó
https://github.com/vim/vim/security/advisories/GHSA-2gmj-rpqf-pxvh/https://nvd.nist.gov/vuln/detail/CVE-2026-34714
¾©¹«Íø°²±¸11010802024551ºÅ