Medium: vim

Issue Overview: Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist...

Amazon Linux AMI : vim (ALAS-2023-1893)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1893 advisory. Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file...

Low: vim

Issue Overview: Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in...

Amazon Linux 2 : vim (ALAS-2023-2353)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2353 advisory. Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be...

USN-6452-1: Vim vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Vim could be made to divide by zero. An attacker could possibly use this issue to cause a denial of service. This issue only affected...

Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite

...

OESA-2023-1874 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

Vim Memory Use After Free

The vulnerability of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Use After Free

Vim is vulnerable to Heap Based Use After Free. The vulnerability is caused when executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part causing a free-ing of the memory because of recursive :s call which may later be accessed by the initia...

Vim < 9.0.2107

Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling is enabled and the cpo-settings include the 'n' flag. This may happen when a window border is present and when the wrapped line continues o...

Vim < 9.0.2106

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in release version 9.0.2106. Note that Nessus has not tested for...

Vim < 9.0.2109

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in release version 9.0.2109. Not...

Vim < 9.0.2121

Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory which may later...

Vim < 9.0.2110

Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONGMAX - lnum will cause the overflow. Impact is low, user interactio...

Vim < 9.0.2108

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in releas...

Buffer Overflow

Vim is vulnerable to Buffer Overflow. The vulnerability is due to an improper bound checking while parsing relative ex addresses. This issue can be exploited by an attacker to cause a buffer overflow leading to DoS...

Integer Overflow

vim is vulnerable to Integer Overflow. The vulnerability is due to there is no validation or checks when obtaining the count for a normal mode z command. This allows an attacker to create a overflow especially with large counts...

Integer Overflow

Vim is vulnerable to Integer Overflow Vulnerability. The vulnerability is due to improper bound checking while using z= command. The attacker can trigger a crash by entering a number larger than MAXINT, which leads to DoS...

Denial Of Service (DoS)

Vim is vulnerable to Denial of Service DoS. The vulnerability is due to shifting lines in operator pending mode while using a very large value, which results in overflowing the buffer allocated for the shiftline integer...

Use-After-Free

vim is vulnerable to Use-After-Free. The vulnerability occurs when closing windows due to a memory access issue resulting in malicious attackers being able to crash the application or potentially even gain control of the system...