Vim has path traversial issue with tar.vim and special crafted tar files

Vim is an open source, command line text editor. Prior to version 9.1.1552,a path traversal issue in Vim’s tar.vim plugin can allow overwriting ofarbitrary files when opening specially crafted tar archives. Impact is lowbecause this exploit requires direct user interaction. However,successfully exploitation can lead to overwriting sensitive files orplacing executable code in privileged locations, depending on thepermissions of the process editing the archive. The victim must edit such afile using Vim which will reveal the filename and the file content, acareful user may suspect some strange things going on. Successfulexploitation could results in the ability to execute arbitrary commands onthe underlying operating system. Version 9.1.1552 contains a patch for thevulnerability.

Where it's fixed