CVE-2017-1000382 log

Severity Medium
Remote No
Type Information disclosure
VIM ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary. An attacker might search for vim swap files in order to retrieve security sensible data.
Group Package Affected Fixed Severity Status Ticket
AVG-635 gvim, vim 8.0.1530-1 8.0.1531-1 Medium Fixed