10361 matches found
Vim 缓冲区错误漏洞
Vim is a cross-platform text editor. A buffer overflow vulnerability exists in versions of Vim prior to 9.0.0598, which stems from a boundary error in winredrruler in drawscreen.c:799 when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on th...
CVE-2022-3324
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...
Slackware: Security Advisory (SSA:2022-269-02)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-3297
A heap use-after-free vulnerability was found in Vim's processnextcptvalue function of the src/insexpand.c file. This flaw occurs due to the usage of freed memory when 'tagfunc' wipes out the buffer that holds 'complete.' This flaw allows an attacker to trick a user into opening a specially craft...
CVE-2022-3278
A NULL pointer dereference vulnerability was found in Vim's evalnextnonblank function of the src/eval.c file. The flaw occurs when using NUL in buffer uses :source. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a NULL pointer dereference that cause...
CVE-2022-3296
A stack-based buffer overflow vulnerability was found in vim's exfinally function of the src/exeval.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a bug that causes an application to crash, possibly executing code and corrupting memory...
Slackware Linux 15.0 / current vim Vulnerability (SSA:2022-269-02)
The version of vim installed on the remote host is prior to 9.0.0594. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-269-02 advisory. - Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577. CVE-2022-3296 Note that Nessus has not tested for this...
Vim src/undo.c Heap Buffer Overflow DoS
The vulnerability of the src/undo.c component of the Vim text editor lies in the fact that “undo” leaves the end of the visual area at the end of the line. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failur...
ROS-20220926-01
A vulnerability in the Vim text editor is related to a boundary error in the utfcptr2len function in mbyte. Exploitation of the vulnerability could allow an attacker acting remotely to trick the victim into to open a specially crafted file, cause a heap buffer overflow, and execute arbitrary code...
Vim spell_iswordp Heap Buffer Overflow DoS
The vulnerability of the spelliswordp function in the spell.c component of the Vim text editor is related to the lack of checks for empty prewords. Exploiting this vulnerability allows a malicious user to access confidential data, compromise its integrity, and even cause service failures...
Vim regexp_nfa.c Heap Buffer Overflow DoS
The vulnerability of the regexpnfa.c component in the text editor Vim is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
Vim src/window.c Heap Buffer Overflow
The vulnerability in the src/window.c component of the Vim text editor is related to reading data beyond the buffer’s allowed limits. Exploiting this vulnerability allows an attacker to gain access to confidential data...
Vim Command Line Access
The vulnerability of the Vim text editor’s command line interface is related to the lack of measures to clean input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
Vim findfile.c Data Compromise
The vulnerability of the findfile.c component of the Vim text editor is related to the improper handling of CTR-W f when the file name is absent. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2405)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware: Security Advisory (SSA:2022-266-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-3297
Use After Free in GitHub repository vim/vim prior to 9.0.0579...
CVE-2022-3297
Use After Free in GitHub repository vim/vim prior to 9.0.0579...
