10412 matches found
Buffer Over-read in function utf_ptr2char
Description Buffer Over-read in function utfptr2char at mbyte.c:1794 vim version git log commit 31d9948e3a2529c2f619d56bdb48291dc261233d HEAD - master, tag: v8.2.5026, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /mnt/share/max/fuzz/poc/vim/poch10ns.dat -c :qa!...
PT-2022-4639
Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to a buffer over-read in the Vim text editor. It is associated with the use of memory after it has been freed, which can be exploited to impact the confidentiality, integrity, and...
Fedora: Security Advisory for vim (FEDORA-2022-74b9e404c1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: vim-8.2.4975-1.fc35
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
Fedora: Security Advisory for vim (FEDORA-2022-d6d1ac4ca7)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2018-11319
Syntastic aka vim-syntastic through 3.9.0 does not properly handle searches for configuration files it searches the current directory up to potentially the root. This improper handling might be exploited for arbitrary code execution via a malicious gcc plugin, if an attacker has write access to a...
Denial Of Service (DoS)
vim is vulnerable to denial of service. An attacker can crash the application through the heap-based buffer overflow in the cmdlineerasechars function of the library...
Heap-Based Buffer Overflow
vim is vulnerable to heap buffer overflow. The vulnerability exists in vimstrncpy findword which allows an attacker to bypass protection mechanism and crash the system...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to a NULL Pointer Dereference in function vimregexecstring at regexp.c allowing an attacker to crash the system via a maliciously crafted input...
Fixed CVEs in vim: CVE-2022-1620, CVE-2022-1616, CVE-2022-1629, CVE-2022-1621, CVE-2022-1619
CVE-2022-1619: fix going before the command line start with latin1 encoding - CVE-2022-1620: fix NULL pointer dereference when using invalig regexp - CVE-2022-1621: fix to avoid adding invalid bytes with :spellgood - CVE-2022-1629: fix reading past end of line if ended with trailing backslash -...
CLSA-2022-1653006752 Fixed CVEs in vim: CVE-2022-1620, CVE-2022-1616, CVE-2022-1629, CVE-2022-1621, CVE-2022-1619
CVE-2022-1619: fix going before the command line start with latin1 encoding - CVE-2022-1620: fix NULL pointer dereference when using invalig regexp - CVE-2022-1621: fix to avoid adding invalid bytes with :spellgood - CVE-2022-1629: fix reading past end of line if ended with trailing backslash -...
Vim Heap Buffer Overflow DoS
The vulnerability of the vimregexecstring function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
Vim cmdline_erase_chars() Code Execution
The vulnerability of the cmdlineerasechars function in the Vim text editor is related to the issue of writing operations beyond the buffer’s boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure using a specially created...
Fedora: Security Advisory for vim (FEDORA-2022-d20b51de9c)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
ALPINE-CVE-2022-1796
Use After Free in GitHub repository vim/vim prior to 8.2.4979...
AZL-9791 CVE-2022-1796 affecting package vim for versions less than 8.2.5064-1
Use After Free in GitHub repository vim/vim prior to 8.2.4979...
CVE-2022-1796
Use After Free in GitHub repository vim/vim prior to 8.2.4979...
CVE-2022-1796
Use After Free in GitHub repository vim/vim prior to 8.2.4979...