UBUNTU-CVE-2022-3324

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

Stack overflow

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

CVE-2022-3324

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

Use After Free in function did_set_string_option

Description Use After Free in function didsetstringoption at optionstr.c:2456. vim version git log commit 8279af514ca7e5fd3c31cf13b0864163d1a0bfeb grafted, HEAD - master, tag: v9.0.0598, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S...

NULL Pointer Dereference in vim/vim

...

Vim code issue vulnerability (CNVD-2022-68076)

Vim is a cross-platform text editor. a code issue vulnerability exists in versions prior to Vim 9.0.0552, which stems from NULL pointer dereferencing. No detailed vulnerability details are currently available...

Vim Resource Management Error Vulnerability (CNVD-2022-68077)

Vim is a cross-platform text editor. A resource management error vulnerability exists in versions prior to Vim 9.0.0579 that stems from reuse after release. No details of the vulnerability are provided at this time...

CVE-2022-3324 Stack-based Buffer Overflow in vim/vim

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

CVE-2022-3324

CVE-2022-3324 is a stack-based buffer overflow in vim/vim prior to 9.0.0598. Multiple vendors reference a fix in later vim releases (e.g., CBLMariner notes vim 9.0.0614-1; Debian tracks a fix in vim 2:8.2.2434-3+deb11u3; Cloud Linux/ALAS advisories describe the underlying issue as a window width/...

CVE-2022-3324

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

Slackware: Security Advisory (SSA:2022-269-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in versions of Vim prior to 9.0.0598, which stems from a boundary error in winredrruler in drawscreen.c:799 when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on th...

CVE-2022-3324 Stack-based Buffer Overflow in vim/vim

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

CVE-2022-3297

A heap use-after-free vulnerability was found in Vim's processnextcptvalue function of the src/insexpand.c file. This flaw occurs due to the usage of freed memory when 'tagfunc' wipes out the buffer that holds 'complete.' This flaw allows an attacker to trick a user into opening a specially craft...

CVE-2022-3278

A NULL pointer dereference vulnerability was found in Vim's evalnextnonblank function of the src/eval.c file. The flaw occurs when using NUL in buffer uses :source. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a NULL pointer dereference that cause...

CVE-2022-3296

A stack-based buffer overflow vulnerability was found in vim's exfinally function of the src/exeval.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a bug that causes an application to crash, possibly executing code and corrupting memory...

The vulnerability of the Vim text editor’s command line allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Vim text editor’s command line interface is related to the lack of measures to clean input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the findfile.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the findfile.c component of the Vim text editor is related to the improper handling of CTR-W f when the file name is absent. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability in the src/undo.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the src/undo.c component of the Vim text editor lies in the fact that “undo” leaves the end of the visual area at the end of the line. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failur...

The vulnerability in the src/window.c component of the text editor Vim, which allows an attacker to access confidential data

The vulnerability in the src/window.c component of the Vim text editor is related to reading data beyond the buffer’s allowed limits. Exploiting this vulnerability allows an attacker to gain access to confidential data...