CVE-2023-48235

Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONGMAX - lnum will cause the overflow. Impact is low, user interactio...

CVE-2023-48235 overflow in ex address parsing in vim

Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONGMAX - lnum will cause the overflow. Impact is low, user interactio...

CVE-2023-48235 overflow in ex address parsing in vim

Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONGMAX - lnum will cause the overflow. Impact is low, user interactio...

CVE-2023-48236

Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAXINT. Impact is low, user interaction is required and a crash may not even happen in all situations. This vulnerability has been addressed in commit 73b2d379 which...

CVE-2023-48236 overflow in get_number in vim

Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAXINT. Impact is low, user interaction is required and a crash may not even happen in all situations. This vulnerability has been addressed in commit 73b2d379 which...

CVE-2023-48236

CVE-2023-48236 ( Vim ): The vulnerability arises when using the z= command; counts larger than MAX_INT may overflow. Affected versions prior to the patch release, resolved by commit 73b2d379 in Vim 9.0.2111. Upgrade to at least 9.0.2111 to address this. Impact is described as low, with user inter...

CVE-2023-48236

Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAXINT. Impact is low, user interaction is required and a crash may not even happen in all situations. This vulnerability has been addressed in commit 73b2d379 which...

CVE-2023-48236 overflow in get_number in vim

Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAXINT. Impact is low, user interaction is required and a crash may not even happen in all situations. This vulnerability has been addressed in commit 73b2d379 which...

CVE-2023-48236 overflow in get_number in vim

Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAXINT. Impact is low, user interaction is required and a crash may not even happen in all situations. This vulnerability has been addressed in commit 73b2d379 which...

CVE-2023-48237

Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possible to overflow the size of integer. Impact is low, user interaction is required and a crash may not even happen in all situations. This...

CVE-2023-48237 overflow in shift_line in vim

Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possible to overflow the size of integer. Impact is low, user interaction is required and a crash may not even happen in all situations. This...

CVE-2023-48237 overflow in shift_line in vim

Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possible to overflow the size of integer. Impact is low, user interaction is required and a crash may not even happen in all situations. This...

CVE-2023-48237

CVE-2023-48237 (Vim) affects Vim’s shift operation in operator-pending mode when a very large value is used, potentially overflowing an integer. The issue is fixed in Vim commit 6bf131888 and has been included in version 9.0.2112. The described impact is low and user interaction is required; a cr...

CVE-2023-48237

Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possible to overflow the size of integer. Impact is low, user interaction is required and a crash may not even happen in all situations. This...

PT-2023-8859

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2112 Description The issue is related to the use of very large values when shifting lines in operator pending mode, potentially leading to an integer overflow. This may cause a crash, although the impact is considered...

CVE-2023-48235: Integer Overflow or Wraparound

Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONGMAX - lnum will cause the overflow. Impact is low, user interactio...

CVE-2023-48232: Improper Handling of Exceptional Conditions

Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling is enabled and the cpo-settings include the 'n' flag. This may happen when a window border is present and when the wrapped line continues o...

PT-2023-8856

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2109 Description The issue is related to the nv z get count function in the Vim text editor, which can overflow when large counts are given for the normal mode z command. This may allow a remote attacker to cause a...

Vim input validation vulnerability

Vim is a cross-platform text editor. An integer overflow vulnerability exists in versions prior to Vim v9.0.2112, which stems from shiftline failing to properly handle integer-related operations. An attacker can exploit this vulnerability to cause a denial of service...

PT-2023-8855

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2108 Description The issue is related to the use of large values for the :s command, which can exceed the capacity of a signed long variable, potentially leading to a crash. The impact is considered low, and user...