In which case would I open a file with vim like that? Or can it be hidden in inn... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

tluyben2 on June 4, 2019 | parent | context | favorite | on: Vim/Neovim Arbitrary Code Execution via Modelines

In which case would I open a file with vim like that? Or can it be hidden in innocent looking files? I always first cat a file.

And never heard of modeline even though using vim for over 20 years.

paxswill on June 4, 2019 | [–]

The second PoC hides the modeline when printed with `cat`.

tluyben2 on June 4, 2019 | | [–]

Sorry, missed that one, thanks for pointing out.

marshray on June 5, 2019 | | [–]

When you cat a file, this is what you are allowing it to do to your console/terminal:

http://man7.org/linux/man-pages/man4/console_codes.4.html

panpanna on June 4, 2019 | [–]

They say there is no "i" in "denial".

Disclaimer: I use emacs.

Consider applying for YC's Summer 2025 batch! Applications are open till May 13
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact