PT-2023-1015 · Vim +8 · Vim +8

Name of the Vulnerable Software and Affected Versions: vim versions prior to 9.0.1143 Description: The issue is related to an out-of-bounds read in the build stl str hl function of the Vim text editor, which can be exploited to execute arbitrary code. This is due to a buffer overflow in memory...

CVE-2023-0049 Out-of-bounds Read in vim/vim

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...

Vim 安全漏洞

Vim is a cross-platform text editor. A security vulnerability exists in versions of Vim prior to 9.0.1144, which stems from a heap memory overflow in the function msgputsprintf, and can be exploited by an attacker to trigger a denial of service and potentially run code...

CVE-2023-0054 Out-of-bounds Write in vim/vim

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145...

CVE-2023-0051 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144...

CLSA-2022-1670874574 vim: Fix of 2 CVEs

CVE-2022-4141: check for text locked in CTRL-W gf - CVE-2022-3520: check that the column does not become negative...

The vulnerability of the Vim text editor lies in the fact that it allows reading beyond the permissible buffer data limits. This enables attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Vim text editor is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the enter_buffer function in the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the enterbuffer function in the Vim text editor relates to the use of memory after it is freed when using :lopen and :bwipe commands. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the Vim text editor lies in the fact that it allows reading beyond the allowed buffer data limits. This enables attackers to gain access to confidential data and also causes service interruptions.

The vulnerability of the Vim text editor is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause service interruptions...

UBUNTU-CVE-2022-4293

Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804...

UBUNTU-CVE-2022-4292

Use After Free in GitHub repository vim/vim prior to 9.0.0882...

CVE-2022-4292 Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to 9.0.0882...

Vim 安全漏洞

Vim is a cross-platform text editor. A security vulnerability exists in Vim versions prior to 9.0.0804, which stems from the comparison of floating point operators with error operators...

UBUNTU-CVE-2022-3491

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742...

UBUNTU-CVE-2022-3520

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765...

CVE-2022-3591 Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to 9.0.0789...

AZL-11504 CVE-2022-4141 affecting package vim for versions less than 9.0.0982-1

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

Heap overflow

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to arbitrary code execution due to CVE-2022-2124, CVE-2022-2125, CVE-2022-2126 and CVE-2022-2129

Summary Vim is not used directly by IBM App Connect Enterprise Certified Container but is present in the operand images as part of the base operating system. Use of vim within IBM App Connect Enterprise Certified Container operands may be vulnerable to arbitrary code execution. This bulletin...

CVE-2022-3705 vim autocmd quickfix.c qf_update_buffer use after free

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...