10359 matches found
CVE-2022-2257
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0...
ALSA-2022:5319 Moderate: vim security update
Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: heap buffer overflow CVE-2022-1621 vim: buffer over-read CVE-2022-1629 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to...
Vim Buffer Overflow Vulnerability (CNVD-2022-68096)
Vim is a cross-platform text editor. buffer overflow vulnerability exists in versions of Vim prior to 8.2, which stems from a boundary error in the msgouttransattr function when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system...
Fedora: Security Advisory for vim (FEDORA-2022-719f3ec21b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Vim 缓冲区错误漏洞
Vim is a cross-platform text editor. buffer overflow vulnerability exists in versions prior to Vim 9.0, which stems from an out-of-bounds read in vim/vim. No detailed vulnerability details are currently available...
Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5498-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5498-1 advisory. It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file...
vim security update
8.2.2637-16.0.1 - - Remove upstream references Orabug: 31197557 2:8.2.2637-16.2 - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read 2:8.2.2637-16.1 - CVE-2022-0554 vim: Use of Out-of-range Pointer Offset in vim prior - CVE-2022-0943 vim: Heap-based Buffer Overflow occu...
CVE-2022-2210
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...
CVE-2022-2208
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163. Mitigation Untrusted vim scripts with -s scriptin are not recommended to run...
CVE-2022-2207
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Mitigation Untrusted vim scripts with -s scriptin are not recommended to run...
CVE-2022-2231
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2...
CVE-2022-2183
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. Mitigation Untrusted vim scripts with -s scriptin are not recommended to run...
Stack-based Buffer Overflow in function spell_dump_compl
Description Stack-based Buffer Overflow in function spelldumpcompl at spell.c:4038 vim version git log commit 75417d960bd17a5b701cfb625b8864dacaf0cc39 HEAD - master, tag: v9.0.0001, origin/master, origin/HEAD POC ./afl/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pocsbo1s.dat -c :qa!...
Integer Overflow in function del_typebuf
Description Integer Overflow in function deltypebuf at getchar.c:1204 vim version git log commit 75417d960bd17a5b701cfb625b8864dacaf0cc39 HEAD - master, tag: v9.0.0001, origin/master, origin/HEAD POC ./afl/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pocintof1s.dat -c :qa!...
Out-of-bounds Read in function ins_bytes
Description Out-of-bounds Read in function insbytes at change.c:968 vim version git log commit 9610f94510220c783328e1857af87a6ae7bc20b4 HEAD - master, tag: v9.0.0014, origin/master, origin/HEAD POC ./afl/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pocobr4s.dat -c :qa!...
Heap-based Buffer Overflow in function utfc_ptr2len
Description Heap-based Buffer Overflow in function utfcptr2len at mbyte.c:2113 vim version git log commit 75417d960bd17a5b701cfb625b8864dacaf0cc39 HEAD - master, tag: v9.0.0001, origin/master, origin/HEAD POC ./afl/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pochbor3s.dat -c :qa!...
PT-2022-5221
Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0 Description The issue is related to a stack-based buffer overflow in the spell dump compl function of the spell.c component in the Vim text editor. This can allow a remote attacker to access confidential data,...
Vim get_one_sourceline function
The vulnerability of the getonesourceline function in the Vim text editor is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by opening a specially created file...
