10385 matches found
CVE-2022-1851: Out-of-bounds Read
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
CVE-2022-1851
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
Vim buffer error vulnerability
Vim is a cross-platform text editor. A security vulnerability exists in Vim prior to version 8.2, which stems from an out-of-bounds read issue in Vim...
CVE-2022-1851
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim
...
Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5433-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5433-1 advisory. It was discovered that Vim incorrectly handled parsing of filenames in its search functionality. If a user were tricked into opening a specially crafted...
Fedora: Security Advisory for vim (FEDORA-2022-d044e7e0b4)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CLSA-2022-1653328424 Fixed CVEs in vim: CVE-2022-1616, CVE-2022-1621, CVE-2022-1620, CVE-2022-1629, CVE-2022-1619
CVE-2022-1619: fix going before the command line start with latin1 encoding - CVE-2022-1620: fix NULL pointer dereference when using invalig regexp - CVE-2022-1621: fix to avoid adding invalid bytes with :spellgood - CVE-2022-1629: fix reading past end of line if ended with trailing backslash -...
USN-5433-1: Vim vulnerabilities
It was discovered that Vim incorrectly handled parsing of filenames in its search functionality. If a user were tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service. CVE-2021-3973 It was discovered that Vim incorrectly handled memo...
Out-of-bounds read in function gchar_cursor
Description Out-of-bounds read in function gcharcursor at misc1.c:532 vim version git log commit 68e64d2c1735f2a39afa8a0475ae29bedb116684 HEAD - master, tag: v8.2.5006, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /mnt/share/max/fuzz/poc/vim/poch11s.dat -c :qa!...
Heap-based Buffer Overflow in function utf_head_off
Description Heap-based Buffer Overflow in function utfheadoff at mbyte.c:3872 vim Version git log commit 68e64d2c1735f2a39afa8a0475ae29bedb116684 HEAD - master, tag: v8.2.5006, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S poch6s.dat -c :qa!...
[SECURITY] Fedora 34 Update: vim-8.2.4975-1.fc34
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
PT-2022-4857
Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to an out-of-bounds read in the Vim text editor, specifically in the gchar cursor function of the misc1.c component. This allows a remote attacker to access confidential data, compromi...
Buffer Over-read in function utf_ptr2char
Description Buffer Over-read in function utfptr2char at mbyte.c:1794 vim version git log commit 31d9948e3a2529c2f619d56bdb48291dc261233d HEAD - master, tag: v8.2.5026, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /mnt/share/max/fuzz/poc/vim/poch10ns.dat -c :qa!...
PT-2022-4639
Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to a buffer over-read in the Vim text editor. It is associated with the use of memory after it has been freed, which can be exploited to impact the confidentiality, integrity, and...
Fedora: Security Advisory for vim (FEDORA-2022-74b9e404c1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: vim-8.2.4975-1.fc35
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
Fedora: Security Advisory for vim (FEDORA-2022-d6d1ac4ca7)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2018-11319
Syntastic aka vim-syntastic through 3.9.0 does not properly handle searches for configuration files it searches the current directory up to potentially the root. This improper handling might be exploited for arbitrary code execution via a malicious gcc plugin, if an attacker has write access to a...
Denial Of Service (DoS)
vim is vulnerable to denial of service. An attacker can crash the application through the heap-based buffer overflow in the cmdlineerasechars function of the library...