8782 matches found
[SECURITY] Fedora 34 Update: vim-8.2.4068-1.fc34
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
Fedora: Security Advisory for vim (FEDORA-2022-48b86d586f)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Heap-based Buffer Overflow
vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exists in winredrstatus in drawscreen.c because the length of the NameBuff hasn't been checked when appending a space which leads to a buffer overflow...
Null Pointer Dereference
vim is vulnerable to denial of service DoS attacks. The vulnerability exist in vimregexecmulti function in regexp.c file, causing a null pointer dereference and allow attacker to execute denial of service attack...
in vim/vim
Description Stack Pointer $RSP is corrupted at function eval7t in eval.c during calling eval3, eval4, eval5, eval6, eval7... continuously while parsing too many brackets. vim version : 8.2.4195 latest commit hash : 79a6e25b79cdb35e00d8b364516103eb358d8cc7 Proof of Concept $ echo -ne...
Out-of-bounds Reads
vim is vulnerable to Out-of-bounds Reads. The vulnerability exists when a user tries to open a vim session file which allows an attacker to obtain sensitive information...
Buffer Overflow
vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to a lack of sanitization...
Heap-based Buffer Overflow
vim is vulnerable to heap-based buffer overflow. The vulnerability exist in the 'onefunctionarg' function in 'userfunc.c' causes a heap-based buffer overflow which could result in an application crash...
Heap-Based Buffer Overflow
vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to the lack of sanitization of the help.ccauses a heap-based buffer overflow which could result in an application crash...
Use After Free
vim is vulnerable to use after free...
Buffer Overflow
vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exist due to a lack of sanitization of the memory control pointer...
Out-of-Bounds Read
vim is vulnerable to Out-of-bounds Read. The vulnerability exists due to a lack of control on the memory function pointer...
Use After Free
vim is vulnerable to use-after-free vulnerability. A remote unauthenticated attacker is able to exploit heap corruption via a crafted HTML page, resulting in a system hang...
Use After Free
vim is vulnerable to use after free...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to the out-of-bounds read in the application, allowing an attacker to cause an application crash...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to the use after free in the library, allowing an attacker to cause an application crash...
OESA-2022-1500 vim security update
Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...
CVE-2022-0213
A flaw was found in vim. The vulnerability occurs due to not checking the length for the NameBuff function, which can lead to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s...
