CVE-2023-48236: Integer Overflow or Wraparound

Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAXINT. Impact is low, user interaction is required and a crash may not even happen in all situations. This vulnerability has been addressed in commit 73b2d379 which...

Vim 输入验证错误漏洞

Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim v9.0.2109, which stems from the possibility that a given large count may overflow when obtaining the count of a normal mode z command. An attacker could exploit this vulnerability to cause...

Vim 输入验证错误漏洞

Vim is a cross-platform text editor. An integer overflow vulnerability exists in versions prior to Vim v9.0.2112, which stems from shiftline failing to properly handle integer-related operations. An attacker can exploit this vulnerability to cause a denial of service...

Vim Input Validation Error Vulnerability

Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim v9.0.2111, which stems from the fact that users may overflow larger values when using the z= command...

Vim Security Vulnerabilities

Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim v9.0.2107, which stems from a floating point exception that may occur when calculating line offsets for extra-long lines and enabling smooth scrolling and the cpo setting contains the n flag...

Vim Input Validation Error Vulnerability

Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim v9.0.2110, which stems from an overflow that can be inadvertently caused when parsing relative ex addresses...

CVE-2023-48231: Use After Free

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in release version...

CVE-2023-48235: Integer Overflow or Wraparound

Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONGMAX - lnum will cause the overflow. Impact is low, user interactio...

PT-2023-8856

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2109 Description The issue is related to the nv z get count function in the Vim text editor, which can overflow when large counts are given for the normal mode z command. This may allow a remote attacker to cause a...

PT-2023-8853

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2106 Description The issue is related to the function win close in the text editor Vim, where it may try to access an already freed window structure when closing a window. This could potentially allow an attacker to...

CVE-2023-48233: Integer Overflow or Wraparound

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit...

Medium: vim

Issue Overview: Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist...

Amazon Linux 2 : vim (ALAS-2023-2338)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2338 advisory. Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file...

Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-431)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-431 advisory. Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file...

Medium: vim

Issue Overview: Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist...

The vulnerability of the `vim_iswordp_buf` function in the Vim text editor allows a hacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the vimiswordpbuf function in the Vim text editor is related to the execution of operations beyond the buffer’s memory limits. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and even cause service interruptions through ...

The vulnerability of the diff_write_buffer function in the Vim text editor allows a hacker to trigger a service failure.

The vulnerability of the diffwritebuffer function in the Vim text editor is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created file...

The vulnerability of the get_register function in the Vim text editor allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the getregister function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

OESA-2023-1796 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

Mageia: Security Advisory (MGASA-2023-0314)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...