[SECURITY] Fedora 36 Update: vim-9.0.720-1.fc36

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

OESA-2022-1980 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

PT-2022-7600 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.0.0765 Description: The issue is related to a heap-based buffer overflow in the Vim text editor, specifically in the inc function. This allows an attacker to access confidential data, compromise its integrity, and caus...

CLSA-2022-1665680763 Fixed CVEs in vim: CVE-2022-3296, CVE-2022-3324

CVE-2022-3296: check CSFTRY can be found - CVE-2022-3324: make sure the window width does not become negative...

Fixed CVEs in vim: CVE-2022-3296, CVE-2022-3324

CVE-2022-3296: check CSFTRY can be found - CVE-2022-3324: make sure the window width does not become negative...

CLSA-2022-1665680212 Fixed CVEs in vim: CVE-2022-3296, CVE-2022-3324

CVE-2022-3296: check CSFTRY can be found - CVE-2022-3324: make sure the window width does not become negative...

CVE-2022-3352 affecting package vim 9.0.0404-1

CVE-2022-3352 affecting package vim 9.0.0404-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3235 affecting package vim 9.0.0404-1

CVE-2022-3235 affecting package vim 9.0.0404-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3324 affecting package vim 9.0.0404-1

CVE-2022-3324 affecting package vim 9.0.0404-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3296 affecting package vim 9.0.0404-1

CVE-2022-3296 affecting package vim 9.0.0404-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3234 affecting package vim 9.0.0404-1

CVE-2022-3234 affecting package vim 9.0.0404-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3278 affecting package vim 9.0.0404-1

CVE-2022-3278 affecting package vim 9.0.0404-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3297 affecting package vim 9.0.0404-1

CVE-2022-3297 affecting package vim 9.0.0404-1. An upgraded version of the package is available that resolves this issue...

heap-buffer-overflow in function skipwhite

Description heap-buffer-overflow in function skipwhite at charset.c:1706:12 vim version shell git log commit 56564964e6d0956c29687e8a10cb94fe42f5c097 HEAD - master, tag: v9.0.0719, origin/master, origin/HEAD Proof of Concept shell /home/mist/fuzz/vim/vim/src/vim -u NONE -X -Z -e -s -S poc1 -c :qa...

PT-2022-7601 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.0.0742 Description: The issue is related to a heap-based buffer overflow in the Vim text editor, specifically in the skipwhite function in charset.c, which can lead to a denial of service when exploited. Recommendation...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2594)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the did_set_string_option() function in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the didsetstringoption function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure by opening a specially created file...

Stack Buffer Overflow

vim/vim is vulnerable to stack buffer overflow. The vulnerability exists in exfinally function of exeval.c which allows an attacker to execute arbitrary codes into the system...

Use After Free

vim is vulnerable to use after free. It allowed a remote attacker to potentially exploit heap corruption via a malicious HTML page...

Stack-based Buffer Overflow

vim is vulnerable to stack-based buffer overflow. The vulnerability exists in winredrruler function of drawscreen.c because of using a negative array index with a negative width window which allows an attacker to trick a user into opening a specially malicious file causing an application to crash...