8879 matches found
CVE-2023-4752
A flaw was found in Vim, where it is vulnerable to a use-after-free in the inscomplgetexp function. This flaw allows a specially crafted file to crash software, use unexpected values, or possibly execute code when opened in Vim...
CVE-2023-4738
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848...
CVE-2023-4734
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846...
CVE-2023-4735
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847...
Untrusted Search Path in vim/vim
...
Out-of-bounds Write in vim/vim
...
AppImage Vim loads libc.so.6 from pwd
Description The appimage distribution of vim loads libc.so.6 from the current directory of the user. An attacker with control of files in a directory where the user uses vim could execute arbritrary code. Proof of Concept Proof of concept will use a malicious libc.so.6 generated with below patch ...
SUSE CVE-2023-4734
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846...
SUSE CVE-2023-4736
Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...
SUSE CVE-2023-4751
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331...
SUSE CVE-2023-4735
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847...
SUSE CVE-2023-4738
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848...
Vim 安全漏洞
Vim is a cross-platform text editor. A buffer overflow vulnerability exists in Vim versions prior to 9.0.1873, which stems from a boundary error in the regexp.c:2482 function when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system ...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-2714)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the utfc_ptr2len() function in the Vim text editor allows a hacker to execute arbitrary code.
The vulnerability of the utfcptr2len function in the Vim text editor is related to the execution of an operation outside the buffer’s memory boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
DEBIAN-CVE-2023-4752
Use After Free in GitHub repository vim/vim prior to 9.0.1858...
AZL-28660 CVE-2023-4752 affecting package vim for versions less than 9.0.1897-1
Use After Free in GitHub repository vim/vim prior to 9.0.1858...
CVE-2023-4750
Use After Free in GitHub repository vim/vim prior to 9.0.1857...