Ò»¡¢·ì϶¸ÅÊö
·ìϼûû³Æ | Vim modelineºÅÁîÖ´Ðзì϶ |
CVE ID | CVE-2026-34714 |
·ì϶ÀàÐÍ | ºÅÁî×¢Èë | ·¢ÏÖ¹¦·ò | 2026-3-31 |
·ì϶ÆÀ·Ö | 9.2 | ·ì϶µÈ¼¶ | ÑϳÁ |
¹¥»÷ÏòÁ¿ | ±¾µØ | ËùÐèȨÏÞ | ÎÞ |
ÀûÓÃÄÑ¶È | µÍ | Óû§½»»¥ | ²»±ØÒª |
PoC/EXP | δ¹«¿ª | ÔÚÒ°ÀûÓà | δ·¢ÏÖ |
VimÊÇÒ»¿î¿í·ºÊ¹ÓõĿªÔ´Îı¾±à×ëÆ÷ £¬£¬£¬£¬£¬Ö§³Ö¶àƽ̨ÔËÐÐ £¬£¬£¬£¬£¬¾ß±¸¸ßЧ±à×ë¡¢¾ç±¾À©´ó¼°·á˶²å¼þÉú̬µÈ¸öÐÔ¡£¡£¡£¡£¡£Æämodeline¡¢autocmdµÈ»úÔì¿ÉʵÏÖ×Ô¶¯»¯ÅäÖÃÓëÐÐΪ½ÚÔì £¬£¬£¬£¬£¬¿í·ºÀûÓÃÓÚ¿ª·¢¡¢ÔËά¼°ÏµÍ³ÖÎÀí³¡¾° £¬£¬£¬£¬£¬ÊÇÀàUnixϵͳÖеÄÖ÷Ì⹤¾ßÖ®Ò»¡£¡£¡£¡£¡£
2026Äê3ÔÂ31ÈÕ £¬£¬£¬£¬£¬8827Ì«Ñô¼¯ÍÅ°²È«Ó¦¼±ÏìÓ¦ÖÐÐÄ£¨VSRC£©¼à²âµ½Vim modelineºÅÁîÖ´Ðзì϶¡£¡£¡£¡£¡£¸Ã·ì϶ԴÓÚtabpanelÑ¡ÏîȱʧP_MLE±êÖ¾ £¬£¬£¬£¬£¬µ¼ÖÂmodelineÄܹ»×¢Èë%{expr}±í°×ʽ¶øÎÞÐèÆôÓÃmodelineexpr £¬£¬£¬£¬£¬´Ó¶øÈƹý°²È«Ï޶ȡ£¡£¡£¡£¡£Í¬Ê± £¬£¬£¬£¬£¬autocmd_add()º¯Êý¶Ìȱcheck_secure()УÑé £¬£¬£¬£¬£¬Ê¹¹¥»÷Õß¿ÉÄÜÔÚsandbox»·¾³ÖÐ×¢²á×Ô¶¯ºÅÁî²¢ÔÚÍ˳öºóÖ´ÐС£¡£¡£¡£¡£¹¥»÷Õß¿Éͨ¹ý»ú¹Ø¶ñÒâÎļþÓÕµ¼Óû§´ò¿ª £¬£¬£¬£¬£¬ÔÚÎÞÐè¶î±í½»»¥µÄÇé¿öÏ´¥·¢ËÁÒâOSºÅÁîÖ´ÐÐ £¬£¬£¬£¬£¬¼Ì¶ø»ñÈ¡Óû§È¨ÏÞ¡¢Ö´ÐжñÒâ²Ù×÷»ò½øÒ»²½ºáÏòÒƶ¯¡£¡£¡£¡£¡£¸ÃÎÊÌâ¿ÉÄܵ¼ÖÂÖ÷»ú±»ÆëÈ«½ÚÔì £¬£¬£¬£¬£¬²¢¿ÉÄÜÎ¥·´Êý¾Ý°²È«¼°ºÏ¹æÒªÇó £¬£¬£¬£¬£¬¶ÔÖÕ¶ËÓû§¼°ÆóÒµ»·¾³Ôì³ÉÑϳÁ°²È«·çÏÕ¡£¡£¡£¡£¡£
¶þ¡¢Ó°ÏìÁìÓò
Vim < 9.2.0172
Èý¡¢°²È«´ëÊ©
3.1 Éý¼¶°æ±¾
¹Ù·½ÒÑ°ä²¼½¨¸´²¹¶¡ £¬£¬£¬£¬£¬ÒÔ½¨¸´¸Ã·ì϶¡£¡£¡£¡£¡£
ÏÂÔØÁ´½Ó£ºhttps://github.com/vim/vim/tags/
3.2 һʱ´ëÊ©
ÔÝÎÞ¡£¡£¡£¡£¡£
3.3 ͨÓý¨Òé
? ¶¨ÆÚ¸üÐÂϵͳ²¹¶¡ £¬£¬£¬£¬£¬Ï÷¼õϵͳ·ì϶ £¬£¬£¬£¬£¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£¡£¡£¡£¡£? ¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÔì £¬£¬£¬£¬£¬Åú¸Ä·À»ðǽսÊõ £¬£¬£¬£¬£¬¹Ø¹Ø·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ £¬£¬£¬£¬£¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Â¶³öµ½¹«Íø £¬£¬£¬£¬£¬Ï÷¼õ¹¥»÷Ãæ¡£¡£¡£¡£¡£? ʹÓÃÆóÒµ¼¶°²È«²úÆ· £¬£¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£¡£¡£¡£¡£? ¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí £¬£¬£¬£¬£¬ÆôÓöà³É·ÖÈÏÖ¤»úÔìºÍ×îÓ×ȨÏÞ×¼Ôò £¬£¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏ޶ȡ£¡£¡£¡£¡£? ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£¡£¡£¡£¡£
3.4 ²Î¿¼Á´½Ó
https://github.com/vim/vim/security/advisories/GHSA-2gmj-rpqf-pxvh/https://nvd.nist.gov/vuln/detail/CVE-2026-34714
¾©¹«Íø°²±¸11010802024551ºÅ