VIM RCE via crafted textfile

[sempervictus]

Everyone knows those "swears by vim and only vim" coders. https://github.com/numirias/security/blob/master/doc/2019-06-04_ace-vim-neovim.md might make them swear more.

[h00die]

Looks like a trivial rce!

[wvu]

I asked @busterb if he wanted to do this, since he was already looking at it.

[OJ]

I've tried to repro this on so many installs, and none of them worked out of the box.

[wvu]

That's a good data point. Thank you!

[wvu]

wvu@kharak:~$ grep nomodeline .vimrc*
.vimrc.after:set nomodeline
.vimrc.orig:set nomodeline
wvu@kharak:~$

[philmenow]

I've been trying to get my phone rooted for some time now.when I do I'm going to learn so I can show other's.

[wvu]

Are you going to write a video in Vim?