Vim code issue vulnerability (CNVD-2022-68076)

Vim is a cross-platform text editor. a code issue vulnerability exists in versions prior to Vim 9.0.0552, which stems from NULL pointer dereferencing. No detailed vulnerability details are currently available...

Vim Resource Management Error Vulnerability (CNVD-2022-68077)

Vim is a cross-platform text editor. A resource management error vulnerability exists in versions prior to Vim 9.0.0579 that stems from reuse after release. No details of the vulnerability are provided at this time...

CVE-2022-3324 Stack-based Buffer Overflow in vim/vim

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

CVE-2022-3324

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

CVE-2022-3324

CVE-2022-3324 is a stack-based buffer overflow in vim/vim prior to 9.0.0598. Multiple vendors reference a fix in later vim releases (e.g., CBLMariner notes vim 9.0.0614-1; Debian tracks a fix in vim 2:8.2.2434-3+deb11u3; Cloud Linux/ALAS advisories describe the underlying issue as a window width/...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in versions of Vim prior to 9.0.0598, which stems from a boundary error in winredrruler in drawscreen.c:799 when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on th...

CVE-2022-3324 Stack-based Buffer Overflow in vim/vim

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

Slackware: Security Advisory (SSA:2022-269-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-3297

A heap use-after-free vulnerability was found in Vim's processnextcptvalue function of the src/insexpand.c file. This flaw occurs due to the usage of freed memory when 'tagfunc' wipes out the buffer that holds 'complete.' This flaw allows an attacker to trick a user into opening a specially craft...

CVE-2022-3278

A NULL pointer dereference vulnerability was found in Vim's evalnextnonblank function of the src/eval.c file. The flaw occurs when using NUL in buffer uses :source. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a NULL pointer dereference that cause...

CVE-2022-3296

A stack-based buffer overflow vulnerability was found in vim's exfinally function of the src/exeval.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a bug that causes an application to crash, possibly executing code and corrupting memory...

The vulnerability in the src/undo.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the src/undo.c component of the Vim text editor lies in the fact that “undo” leaves the end of the visual area at the end of the line. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failur...

The vulnerability of the Vim text editor’s command line allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Vim text editor’s command line interface is related to the lack of measures to clean input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the findfile.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the findfile.c component of the Vim text editor is related to the improper handling of CTR-W f when the file name is absent. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the spell_iswordp() function in the spell.c component of the Vim text editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the spelliswordp function in the spell.c component of the Vim text editor is related to the lack of checks for empty prewords. Exploiting this vulnerability allows a malicious user to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability in the src/window.c component of the text editor Vim, which allows an attacker to access confidential data

The vulnerability in the src/window.c component of the Vim text editor is related to reading data beyond the buffer’s allowed limits. Exploiting this vulnerability allows an attacker to gain access to confidential data...

ROS-20220926-01

A vulnerability in the Vim text editor is related to a boundary error in the utfcptr2len function in mbyte. Exploitation of the vulnerability could allow an attacker acting remotely to trick the victim into to open a specially crafted file, cause a heap buffer overflow, and execute arbitrary code...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2405)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2022-266-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability in the regexp_nfa.c component of the Vim text editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the regexpnfa.c component in the text editor Vim is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...