Lucene search

K
redhatcveRedhat.comRH:CVE-2022-3324
HistoryOct 06, 2022 - 8:27 a.m.

CVE-2022-3324

2022-10-0608:27:26
redhat.com
access.redhat.com
67

0.001 Low

EPSS

Percentile

41.8%

A stack-based buffer overflow vulnerability was found in Vim’s win_redr_ruler() function of the src/drawscreen.c file. The issue occurs when using a negative array index with a negative width window. This flaw allows an attacker to trick a user into opening a specially crafted file, which triggers the bug, causing an application to crash, possibly executing code and corrupting memory.

Mitigation

Untrusted vim scripts with -s [scriptin] are not recommended to run.