Stack-based Buffer Overflow

vim is vulnerable to stack-based buffer overflow. The vulnerability exists in winredrruler function of drawscreen.c because of using a negative array index with a negative width window which allows an attacker to trick a user into opening a specially malicious file causing an application to crash...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2483)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2541)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2423)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2436)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the process_next_cpt_value() function in the Vim text editor allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the processnextcptvalue function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code using a specially created file...

The vulnerability of the win_redr_ruler() function in the Vim text editor allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the winredrruler function in the Vim text editor is related to the issue of the operation going beyond the buffer boundaries when using an index for negative arrays with a negative width window. Exploiting this vulnerability can allow an attacker to cause a service failure or...

The vulnerability of the Vim text editor, related to pointer naming errors, allows a hacker to trigger a service failure.

The vulnerability of the Vim text editor is related to errors in pointer manipulation when processing the eval1 frame root/vim/src/vim. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ex_finally() function in the Vim text editor allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the exfinally function in the Vim text editor is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code using a specially created file...

Use-After-Free

vim is vulnerable to use-after-free. The vulnerability is possible because the didsetstringoption refers memory even after it has been freed, leading to a heap use-after-free vulnerability...

EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-2483)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-2423)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 8.2. CVE-2022-1898, CVE-2022-2042 - Heap-based Buffer Overflow in GitHub repository vim/vim...

Vim Resource Management Error Vulnerability (CNVD-2022-68074)

Vim is a cross-platform text editor. A security vulnerability exists in Vim versions prior to 9.0.0614, which stems from a confusion in the instruction in the didsetstringoption function that the program is responsible for freeing memory. An attacker can exploit the vulnerability to potentially...

EulerOS 2.0 SP5 : vim (EulerOS-SA-2022-2451)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in GitHub repository vim/vim prior to 8.2. CVE-2022-2124 - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-3324

A stack-based buffer overflow vulnerability was found in Vim's winredrruler function of the src/drawscreen.c file. The issue occurs when using a negative array index with a negative width window. This flaw allows an attacker to trick a user into opening a specially crafted file, which triggers th...

CVE-2022-3256

A heap use-after-free vulnerability was found in vim's movemark function of the src/mark.c file. This issue occurs because vim uses freed memory when 'autocmd' changes the mark. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free th...

CVE-2022-1725

A NULL pointer dereference vulnerability was found in Vim's vimregexecstring function of the src/regexp.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a NULL pointer dereference that causes a denial of service. Mitigation Untrusted vim scrip...

CVE-2022-3153 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3153 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3134 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3134 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3234 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3234 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...