10296 matches found
CVE-2022-0443
CVE-2022-0443 affects Vim (vim/vim) prior to 8.2. The flaw is a use-after-free involving freed memory, potentially allowing a crafted file to crash Vim or corrupt memory. Public documents describe the vulnerability in that context but do not provide exploit specifics, affected product versions be...
CVE-2022-0443
Use After Free in GitHub repository vim/vim prior to 8.2...
CVE-2022-0443 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 8.2...
CVE-2022-0443
Use After Free in GitHub repository vim/vim prior to 8.2...
Critical Photon OS Security Update - PHSA-2022-0466
Updates of 'expat' packages of Photon OS have been released...
vim: heap-based buffer overflow in find_help_tags() in help.c
A flaw was found in vim. A possible heap-based buffer overflow vulnerability allows an attacker to input a specially crafted file, leading to a crash or code execution. The highest threat from this vulnerability is system availability...
vim: out-of-bound read in getvcol()
It was found that vim was vulnerable to an out-of-bound read flaw in getvcol. A specially crafted file could be used to, when opened in vim, disclose some of the process's internal memory...
vim: use-after-free in win_linetabsize()
It was found that vim was vulnerable to use-after-free flaw in winlinetabsize. Sourcing a specially crafted file in vim could crash the vim process or possibly lead to other undefined behaviors...
vim: illegal memory access in find_start_brace() in cindent.c when C-indenting
A flaw was found in vim. A possible heap-based buffer overflow allows an attacker to input a specially crafted file, leading to a crash or code execution. The highest threat from this vulnerability is confidentiality, integrity, and system availability...
Moderate: Red Hat Security Advisory: vim security update
An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...
vim: heap-based buffer overflow in win_redr_status() in drawscreen.c
An out-of-bounds write flaw was found in vim's drawscreen.c winredrstatus function. This flaw allows an attacker to trick a user to open a crafted file with specific arguments in vim, triggering an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, a...
RLSA-2022:0366 Moderate: vim security update
Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: heap-based buffer overflow in winredrstatus in drawscreen.c CVE-2021-3872 vim: illegal memory access in findstartbrace in cindent.c when C-indenting CVE-2021-3984 vim: heap-based buffer overflow in...
ALSA-2022:0366 Moderate: vim security update
Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: heap-based buffer overflow in winredrstatus in drawscreen.c CVE-2021-3872 vim: illegal memory access in findstartbrace in cindent.c when C-indenting CVE-2021-3984 vim: heap-based buffer overflow in...
Moderate: vim security update
Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: heap-based buffer overflow in winredrstatus in drawscreen.c CVE-2021-3872 vim: illegal memory access in findstartbrace in cindent.c when C-indenting CVE-2021-3984 vim: heap-based buffer overflow in...
vim security update
An update is available for vim. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...
CVE-2022-0393
A flaw was found in vim. The vulnerability occurs due to a crash when recording and using Select mode and leads to an out-of-bounds read. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s scriptin are not...
CVE-2022-0392
A flaw was found in vim. The vulnerability occurs due to illegal memory access with bracketed paste in Ex mode and leads to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s script...
CVE-2022-0417
Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2...