8855 matches found
vim: heap buffer overflow in vim_strncpy
A flaw was found in vim, where it is vulnerable to a heap buffer overflow in the vimstrncpy findword function. This flaw allows a specially crafted file to crash software, modify memory and possibly perform remote execution when opened in vim...
vim: Heap-based Buffer Overflow occurs in vim
A heap buffer overflow flaw was found in vim's suggesttrychange function of the spellsuggest.c file. This flaw allows an attacker to trick a user into opening a crafted file, triggering a heap-overflow and causing an application to crash, which leads to a denial of service...
vim: Use of Out-of-range Pointer Offset in vim
A flaw was found in vim that causes an out-of-range pointer offset vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution...
vim: Out-of-range Pointer Offset
A vulnerability was found in Vim. The issue occurs when using a number in a string for the lambda name, triggering an out-of-range pointer offset vulnerability. This flaw allows an attacker to trick a user into opening a crafted script containing an argument as a number and then using it as a...
vim: use after free in utf_ptr2char
A heap use-after-free vulnerability was found in Vim's utfptr2char function of the src/mbyte.c file. This flaw occurs because vim is using a buffer line after it has been freed in the old regexp engine. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering...
Moderate: Red Hat Security Advisory: vim security update
An update for vim is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...
vim: buffer over-read in function find_next_quote
A flaw was found in vim, where it is vulnerable to a buffer over-read in the findnextquote function. This flaw allows a specially crafted file to crash software, modify memory and possibly perform remote execution when opened in vim...
CVE-2022-2264
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...
CVE-2022-2264
CVE-2022-2264 is a heap-based buffer overflow in Vim (vim/vim) prior to 9.0, caused by an out-of-bounds read during a put in inc() in misc2.c. Connected advisories place this CVE in ALAS2-2022-1868 (Amazon Linux 2) and ALAS2022-2023-098 family bulletins, detailing Vim vulnerabilities and confirmi...
ROS-20220701-01
Vim text editor vulnerability is related to boundary conditions in textobject.c. Exploitation The vulnerability could allow a remote attacker to create a special file, trick the victim into opening it, cause a read error outside the boundaries, and read the memory contents. victim to open it, cau...
ALSA-2022:5242 Moderate: vim security update
Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Use of Out-of-range Pointer Offset in vim CVE-2022-0554 vim: Heap-based Buffer Overflow occurs in vim CVE-2022-0943 vim: Out-of-range Pointer Offset CVE-2022-1420 vim: heap buffer overflow CVE-2022-1621 vim:...
CVE-2022-2264
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...
vim security update
2:8.0.1763-19.0.1.2 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-19.2 - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read 2:8.0.1763-19.1 - CVE-2022-1154 vim: use after free...
Moderate: vim security update
Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Use of Out-of-range Pointer Offset in vim CVE-2022-0554 vim: Heap-based Buffer Overflow occurs in vim CVE-2022-0943 vim: Out-of-range Pointer Offset CVE-2022-1420 vim: heap buffer overflow CVE-2022-1621 vim:...
The vulnerability of the `skipwhite` function in the Vim text editor allows a hacker to execute arbitrary code.
The vulnerability of the skipwhite function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
RHEL 9 : vim (RHSA-2022:5242)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5242 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Use of Out-of-range Pointer Offset in vim...
RHEL 8 : vim (RHSA-2022:5319)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5319 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: heap buffer overflow CVE-2022-1621 vim: buffer...
Vim 安全漏洞
Vim is a cross-platform text editor. versions prior to Vim 9.0.0011 are vulnerable to a buffer overflow vulnerability that stems from a boundary error in the inc function when handling untrusted input. A remote attacker could exploit this vulnerability to crash the software, modify memory, and...
Oracle Linux 8 : vim (ELSA-2022-5319)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5319 advisory. - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read - CVE-2022-1154 vim: use after free in utfptr2char - CVE-2022-0361 vim:...