CVE-2024-43790

Vim (editors) vulnerable to CVE-2024-43790: when using search with shm+=S and rl enabled, Vim allocates a reversed buffer for the search pattern; if the pattern contains ASCII NULs, strlen() stops early, causing a buffer size mismatch and an out-of-bounds read/write in msgbuf. Newer Vim patches f...

CVE-2024-43790 heap-buffer-overflow in do_search() in Vim < 9.1.0689

Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...

CVE-2024-43790 heap-buffer-overflow in do_search() in Vim < 9.1.0689

Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...

Photon OS 5.0: Vim PHSA-2024-5.0-0352

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0352. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20609...

PT-2024-6175 · Vim +3 · Vim +3

Name of the Vulnerable Software and Affected Versions: Vim versions prior to v9.1.0689 Description: The issue is related to a buffer overflow in the Vim text editor. When the search-count message is disabled and right-left mode is enabled, the search pattern is reversed and allocated in a new...

Photon OS 4.0: Vim PHSA-2024-4.0-0671

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0671. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20609...

Vim 安全漏洞

Vim is Vim open source a cross-platform text editor . A buffer overflow vulnerability exists in versions prior to Vim v9.1.0689, which stems from the program's failure to properly validate the length and size of input data, and can be exploited by a remote attacker to execute arbitrary code on th...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2024-2300)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6965-1: Vim vulnerabilities

It was discovered that vim incorrectly handled parsing of filenames in its search functionality. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service. CVE-2021-3973 It was discovered that vim incorrectly handled memor...

USN-6965-1 vim vulnerabilities

It was discovered that vim incorrectly handled parsing of filenames in its search functionality. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service. CVE-2021-3973 It was discovered that vim incorrectly handled memor...

Moderate Photon OS Security Update - PHSA-2024-5.0-0352

Updates of 'vim', 'unbound' packages of Photon OS have been released...

Ubuntu 14.04 LTS : Vim vulnerabilities (USN-6965-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6965-1 advisory. It was discovered that vim incorrectly handled parsing of filenames in its search functionality. If a user was tricked into opening a specially crafted...

Vim Memory Reference Error Vulnerability (CNVD-2024-40461)

Vim is Vim open source a cross-platform text editor . Vim suffers from a Memory Reference Error vulnerability that stems from a confusion in the instruction responsible for freeing memory in parameter list handling. An attacker can exploit the vulnerability which may result in a program crash,...

Moderate Photon OS Security Update - PHSA-2024-4.0-0671

Updates of 'vim', 'unbound' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2024-5.0-91-0352

Updates of 'vim', 'unbound' packages of Photon OS have been released...

Ubuntu: Security Advisory (USN-6965-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the File Name Handler component in the Vim text editor allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the File Name Handler component in the Vim text editor exists due to a mistake in the use of pointers after memory release in the dialogchanged function. Exploiting this vulnerability can allow an attacker to trigger a pointer use-after-free error, resulting in a malfunction ...

SUSE CVE-2024-43374

The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers Buf autocommands. If in such an autocommand the buffer that was just opened is closed including the window where it is shown, this causes...

OESA-2024-1982 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

CVE-2024-43374

A heap use-after-free vulnerability was found in Vim's alistadd function. Adding a new file to the argument list triggers Buf autocommands. In an autocommand, if the buffer that was just opened is closed, including the window where it is shown, it causes the window structure to be freed, containi...