8783 matches found
CVE-2022-2982
A heap use-after-free vulnerability was found in vim's qffillbuffer function of the src/quickfix.c file. The issue occurs because vim uses freed memory when recursively using 'quickfixtextfunc.' This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap...
CVE-2022-2980
A NULL pointer dereference vulnerability was found in vim's domouse function of the src/mouse.c file. The issue occurs with a mouse click when it is not initialized. This flaw allows an attacker to trick a user into opening a specially crafted input file, triggering the vulnerability that could...
OESA-2022-1882 vim security update
Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...
Denial Of Service (DoS)
vim is vulnerable to remote code execution. The vulnerability exists due to a use after free allowing an attacker to crash the system via memory corruption...
Buffer Over-read
vim/vim is vulnerable to . The vulnerability exists because of reading before the start of the line which allows an attacker to cause a memory corruption which then leads to an application crash...
Buffer Overflow
vim is vulnerable to heap-based buffer overflow. The vulnerability exists in the latinptr2len function in src/mbyte.c due to lack of validation memory access, allowing an attacker to perform arbitrary out of bound writes...
[SECURITY] Fedora 35 Update: vim-9.0.246-1.fc35
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
Use After Free in function do_cmdline
Description Use After Free in function docmdline at vim/src/exdocmd.c:1076. vim version git log commit 5d09a401ec393dc930e1104ceb38eab34681de64 HEAD - master, tag: v9.0.0343, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /home/fuzz/test/poc7huaf.dat -c :qa...
Vim Resource Management Error Vulnerability (CNVD-2022-68085)
Vim is a cross-platform text editor, and a security vulnerability exists in versions prior to Vim 9.0.0321, which stems from a confusion in the instruction responsible for freeing memory in the qfbufaddline function. An attacker could use this vulnerability to cause a crash, arbitrary code...
CVE-2022-3037
A flaw was found in vim, where it is vulnerable to a use-after-free in the qfbufaddline function. This flaw allows a specially crafted file to crash a program, use unexpected values, or execute code...
Slackware: Security Advisory (SSA:2022-242-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the qf_buf_add_line() function in the Vim text editor allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the qfbufaddline function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the qf_fill_buffer() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the qffillbuffer function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
CVE-2022-3037
Use After Free in GitHub repository vim/vim prior to 9.0.0322...
DEBIAN-CVE-2022-3037
Use After Free in GitHub repository vim/vim prior to 9.0.0322...
ALPINE-CVE-2022-3037
Use After Free in GitHub repository vim/vim prior to 9.0.0322...
CVE-2022-3037
Use After Free in GitHub repository vim/vim prior to 9.0.0322...
AZL-10771 CVE-2022-3037 affecting package vim for versions less than 9.0.0325-1
Use After Free in GitHub repository vim/vim prior to 9.0.0322...
