Mandriva Linux Security Advisory 2008-236 – vim suffers from input sanitization, format string, and arbitrary code execution vulnerabilities.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/72613/MDVSA-2008-236.txt
Source: https://packetstormsecurity.com/files/72613/Mandriva-Linux-Security-Advisory-2008-236.html