10366 matches found
CVE-2022-3134
Use After Free in GitHub repository vim/vim prior to 9.0.0389...
CVE-2022-3134
CVE-2022-3134 affects vim/vim prior to 9.0.0389. Connected advisories confirm a use-after-free in Vim (notably when closing a window during tag searches) that can crash the editor or potentially corrupt memory. Remediation in the linked documents shows that Vim has been patched in subsequent rele...
Vim resource management error vulnerability
Vim is a cross-platform text editor. versions prior to Vim 9.0.0388 are vulnerable to a resource management error, which stems from post-release reuse. No detailed vulnerability details are currently available...
Vim Resource Management Error Vulnerability (CNVD-2022-62219)
Vim is a cross-platform text editor. versions prior to Vim 9.0.0359 are vulnerable to a resource management error, which stems from a post-release reuse in the function docmdline. An attacker could exploit this vulnerability to cause a denial of service attack...
CVE-2022-3134: Use After Free
Use After Free in GitHub repository vim/vim prior to 9.0.0389...
CVE-2022-3134 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0389...
CVE-2022-3134 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0389...
Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-116)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-116 advisory. A heap buffer over-read vulnerability was found in Vim's grabfilename function of the src/findfile.c file. This flaw occurs because the function reads after the NULL terminates the line with gf...
Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-077)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-077 advisory. A flaw was found in vim. The vulnerability occurs due to a crash when recording and using Select mode and leads to an out-of-bounds read. This flaw allows an attacker to input a specially craft...
CVE-2022-3016
A heap use-after-free vulnerability was found in vim's getnextvalidentry function of the src/quickfix.c file. The issue occurs because vim is using freed memory when the location list is changed in autocmd. This flaw allows an attacker to trick a user into opening a specially crafted file,...
CVE-2022-3099
A use-after-free vulnerability was found in vim's docmdline function of the src/exdocmd.c file. The issue triggers when an invalid line number on :for is ignored. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering use-after-free that causes an applicati...
Vim Buffer Overflow
The vulnerability of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Vim Buffer Overflow
The vulnerability of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Vim utf_ptr2char() function Data Compromise
The vulnerability of the utfptr2char function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Vim do_cmdline() Buffer Overflow
The vulnerability of the docmdline function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
PT-2022-4707
Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.0404 Description The issue is related to a NULL Pointer Dereference in the vim regcomp function of the Vim text editor. This could allow an attacker to impact the confidentiality, integrity, and availability of...
Fedora: Security Advisory for vim (FEDORA-2022-221bd89404)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: vim-9.0.348-1.fc36
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
Null Dereference in vim_regcomp()
Description: Null Dereference in vimregcomp at vim/src/regexp.c:2716 Vim Version: git log commit 8f7116caddc6f0725cf1211407d97645c4eb7b65 HEAD - master, origin/master, origin/HEAD Proof of Concept: $ git clone https://github.com/vim/vim.git $ cd vim/ && ./configure && make && cd src/ $ echo "call...
