Vim 安全漏洞

Vim is Vim open source a cross-platform text editor . A buffer overflow vulnerability exists in versions prior to Vim v9.1.0689, which stems from the program's failure to properly validate the length and size of input data, and can be exploited by a remote attacker to execute arbitrary code on th...

DEBIAN-CVE-2024-41965

Vim is an open source command line text editor. double-free in dialogchanged in Vim v9.1.0648. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user wants the changed buffer to be saved, Vim may create a new Untitled file, if the buffer did not have a nam...

AZL-47355 CVE-2024-41965 affecting package vim for versions less than 9.0.2121-4

Vim is an open source command line text editor. double-free in dialogchanged in Vim v9.1.0648. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user wants the changed buffer to be saved, Vim may create a new Untitled file, if the buffer did not have a nam...

Vim 安全漏洞

Vim is a cross-platform text editor from the Vim open source. A security vulnerability exists in versions prior to Vim v9.1.0647, which stems from the presence of post-release reuse...

Use After Free in vim/vim

...

The vulnerability of the nv_z_get_count() function in the Vim text editor allows a hacker to cause a service failure.

The vulnerability of the nvzgetcount function in the Vim text editor is related to the use of large values for the z command. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Vim buffer overflow vulnerability (CNVD-2024-40465)

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in Vim versions prior to 9.0.2142, which stems from a boundary error when the application handles untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a deni...

Medium: vim

Issue Overview: Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory...

SUSE CVE-2024-22667

Vim before 9.0.2142 has a stack-based buffer overflow because didsetlangmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions...

CVE-2024-22667

Vim before 9.0.2142 has a stack-based buffer overflow because didsetlangmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions...

Vim 安全漏洞

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in Vim versions prior to 9.0.2142, which stems from a boundary error when the application handles untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a deni...

Low: vim

Issue Overview: Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory...

Low: vim

Issue Overview: Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory...

OESA-2023-1902 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

SUSE CVE-2023-48706

Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory which may later...

Vim Resource Management Error Vulnerability

Vim is a cross-platform text editor. A resource management error vulnerability exists in Vim versions prior to 9.0.2121, which stems from memory reuse after release...

SUSE CVE-2023-48233

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit...

SUSE CVE-2023-48231

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in release version...

CVE-2023-48235

Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONGMAX - lnum will cause the overflow. Impact is low, user interactio...

AZL-32026 CVE-2023-48235 affecting package vim for versions less than 9.0.2112-1

Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONGMAX - lnum will cause the overflow. Impact is low, user interactio...