Lucene search

K
redhatcveRedhat.comRH:CVE-2022-3296
HistorySep 26, 2022 - 12:18 p.m.

CVE-2022-3296

2022-09-2612:18:55
redhat.com
access.redhat.com
14

0.001 Low

EPSS

Percentile

47.9%

A stack-based buffer overflow vulnerability was found in vim’s ex_finally() function of the src/ex_eval.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a bug that causes an application to crash, possibly executing code and corrupting memory.

Mitigation

Untrusted vim scripts with -s [scriptin] are not recommended to run.