Heap-based Buffer Overflow in vim/vim

Description 2 Heap-buffer-overflow on write in vim 1 Heap-buffer-overflow on read in vim Heap-buffer-overflow on write in vim 1 Proof of Concept Steps to reproduce: echo -n cmV0ODAwCnMvXHYvCQpzZSBhaQpzaWwwbm9ybTppDQ== | base64 -d heapowpoc1 vim -u NONE -i NONE -n -X -Z -e -m -s -S heapowpoc1 -c...

[SECURITY] Fedora 34 Update: vim-8.2.4068-1.fc34

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

PT-2022-1728

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2 Description The issue is a heap-based buffer overflow in the vim text editor, specifically in the init ccline function located in ex getln.c. This overflow is caused by insufficient validation of user input, allowing ...

PT-2022-1747

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2 Conda vim versions prior to 8.2 Description The issue is a heap-based buffer overflow in the vim text editor, specifically in the ex cmds.c component, caused by a dynamic memory buffer overflow. This can allow an...

PT-2022-4851

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2 Description The issue is related to an out-of-bounds read in the vim text editor. This can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. The...

Fedora: Security Advisory for vim (FEDORA-2022-48b86d586f)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Heap-based Buffer Overflow

vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exists in winredrstatus in drawscreen.c because the length of the NameBuff hasn't been checked when appending a space which leads to a buffer overflow...

Null Pointer Dereference

vim is vulnerable to denial of service DoS attacks. The vulnerability exist in vimregexecmulti function in regexp.c file, causing a null pointer dereference and allow attacker to execute denial of service attack...

in vim/vim

Description Stack Pointer $RSP is corrupted at function eval7t in eval.c during calling eval3, eval4, eval5, eval6, eval7... continuously while parsing too many brackets. vim version : 8.2.4195 latest commit hash : 79a6e25b79cdb35e00d8b364516103eb358d8cc7 Proof of Concept $ echo -ne...

Out-of-bounds Reads

vim is vulnerable to Out-of-bounds Reads. The vulnerability exists when a user tries to open a vim session file which allows an attacker to obtain sensitive information...

Buffer Overflow

vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to a lack of sanitization...

Heap-based Buffer Overflow

vim is vulnerable to heap-based buffer overflow. The vulnerability exist in the 'onefunctionarg' function in 'userfunc.c' causes a heap-based buffer overflow which could result in an application crash...

Heap-Based Buffer Overflow

vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to the lack of sanitization of the help.ccauses a heap-based buffer overflow which could result in an application crash...

Use After Free

vim is vulnerable to use after free...

Buffer Overflow

vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exist due to a lack of sanitization of the memory control pointer...

Out-of-Bounds Read

vim is vulnerable to Out-of-bounds Read. The vulnerability exists due to a lack of control on the memory function pointer...

Use After Free

vim is vulnerable to use-after-free vulnerability. A remote unauthenticated attacker is able to exploit heap corruption via a crafted HTML page, resulting in a system hang...

Use After Free

vim is vulnerable to use after free...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to the out-of-bounds read in the application, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to the use after free in the library, allowing an attacker to cause an application crash...