CVE-2017-6350

CVE-2017-6350 affects Vim. It is an integer overflow at a memory allocation site (unserialize_uep) when reading a corrupted undo file, potentially causing buffer overflows. The vulnerability is in Vim before the patch 8.0.0378. Public references note the issue alongside related CVEs (e.g., CVE-20...

CVE-2017-6349

CVE-2017-6349 (Vim) : An integer overflow at a u_read_undo memory allocation site can occur if Vim reads a corrupted undo file and does not properly validate the tree length, potentially leading to buffer overflows. Fixed in patches released after 8.0.0377 (examples in advisories cite 8.0.0386 an...

CVE-2017-6349

An integer overflow at a ureadundo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows...

CVE-2017-6349

An integer overflow at a ureadundo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows...

openSUSE Security Update : vim (openSUSE-2017-280)

This update for vim fixes the following issues : - CVE-2017-5953: Fixed a possible overflow with corrupted spell file bsc1024724 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Fedora Update for vim FEDORA-2017-595fec72ef

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : 2:vim (2017-595fec72ef)

The newest upstream commit, fixing CVE-2017-5953 vim: Tree length values not validated properly when handling a spell file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean...

[ASA-201702-12] gvim: arbitrary code execution

Arch Linux Security Advisory ASA-201702-12 ========================================== Severity: Medium Date : 2017-02-15 CVE-ID : CVE-2017-5953 Package : gvim Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-174 Summary ======= The package gvim before version...

[ASA-201702-13] vim: arbitrary code execution

Arch Linux Security Advisory ASA-201702-13 ========================================== Severity: Medium Date : 2017-02-15 CVE-ID : CVE-2017-5953 Package : vim Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-174 Summary ======= The package vim before version...

[SECURITY] Fedora 25 Update: vim-8.0.324-1.fc25

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

Debian DSA-3786-1 : vim - security update

Editor spell files passed to the vim Vi IMproved editor may result in an integer overflow in memory allocation and a resulting buffer overflow which potentially could result in the execution of arbitrary code or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

Vim Buffer Overflow Vulnerability

Vim is an open source, configurable text editor for creating and changing any type of text, available for most UNIX and AppleOSX. A buffer overflow vulnerability exists in versions prior to Vim patch 8.0.0322, which stems from the program failing to properly validate the length value of a tree wh...

[SECURITY] [DSA 3786-1] vim security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3786-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 822-1] vim security update

Package : vim Version : 2:7.3.547-7+deb7u2 CVE ID : CVE-2017-5953 Debian Bug : 854969 A vulnerability has been discovered in Vim where a malformed spell file could cause an integer overflow which is used as the size for memory allocation, resulting in a subsequent buffer overflow. For Debian 7...

CVE-2017-5953

vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow...

Debian Security Advisory DSA 3786-1 (vim - security update)

Editor spell files passed to the vim Vi IMproved editor may result in an integer overflow in memory allocation and a resulting buffer overflow which potentially could result in the execution of arbitrary code or denial of service. OpenVAS Vulnerability Test $Id: deb3786.nasl 6607 2017-07-07...

Debian DLA-822-1 : vim security update

A vulnerability has been discovered in Vim where a malformed spell file could cause an integer overflow which is used as the size for memory allocation, resulting in a subsequent buffer overflow. For Debian 7 'Wheezy', these problems have been fixed in version 2:7.3.547-7+deb7u2. We recommend tha...

DLA-822-1 vim - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3786-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-5953

vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow...