CVE:CVE-2019-20807
CNNVD:CNNVD-202005-1381
Vim是一款基于UNIX平台的编辑器。
Vim 8.1.0881之前版本中存在操作系统命令注入漏洞。攻击者可借助脚本接口（例如Python，Ruby或Lua）利用该漏洞绕过rvim受限模式并执行任意操作系统命令。
solution:Upgrade vim vim to a higher version than 8.1.0881,and avoid the version (,8.1.0881); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,and avoid the version 16.04,18.04; Upgrade apple mac_os_x to a higher version than 10.13.6,10.14.6,and avoid the version 10.13.6,10.14.6; Upgrade starwindsoftware command_center to a higher version than 2:build_6003,and avoid the version 2:build_6003; Upgrade starwindsoftware san_&_nas to a higher version than 1.0:update_1,and avoid the version 1.0:update_1