CVE-2019-20079

CVE-2019-20079 affects Vim; the autocmd feature in window.c can access freed memory in Vim before version 8.1.2136. The issue’s root cause is a use-after-free in the autocmd path. Remediation is to upgrade Vim to 8.1.2136 or newer (as indicated by multiple advisories including Mageia, Debian and ...

CVE-2019-20079

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...

Vim Reuse After Release Vulnerability

Vim is a powerful, highly customizable text editor, an improved version of vi, with many improvements and features added to Vi. A post-release reuse vulnerability exists in the autocmd feature in window.c in versions of Vim prior to 8.1.2136. No detailed vulnerability details are provided at this...

EulerOS 2.0 SP3 : vim (EulerOS-SA-2019-2679)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group which may be different from the group...

EulerOS 2.0 SP2 : vim (EulerOS-SA-2019-2462)

According to the version of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group which may be different from the group ownershi...

Unspecified vulnerability in JetBrains Vim plugin

JetBrains Vim plugin is a Vim simulation plugin for IDE Integrated Development Environment from the Czech company JetBrains. A security vulnerability exists in JetBrains Vim plugin versions prior to 0.52. An attacker can exploit the vulnerability to obtain sensitive information...

CVE-2019-12735

It was found that the :source! command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text file in vim could result in arbitrary command execution. Mitigation The vulnerability can be triggered only if modeline is enabled. You can check...

CVE-2019-14957

The JetBrains Vim plugin before version 0.52 was storing individual project data in the global vimsettings.xml file. This xml file could be synchronized to a publicly accessible GitHub repository...

Design/Logic Flaw

The JetBrains Vim plugin before version 0.52 was storing individual project data in the global vimsettings.xml file. This xml file could be synchronized to a publicly accessible GitHub repository...

CVE-2019-14957

The JetBrains Vim plugin before version 0.52 was storing individual project data in the global vimsettings.xml file. This xml file could be synchronized to a publicly accessible GitHub repository...

CVE-2019-14957

CVE-2019-14957 affects the JetBrains Vim plugin up to version 0.51. The issue arises from storing per-project data in the global vim_settings.xml file, which could be synchronized to a publicly accessible GitHub repository, exposing sensitive information. Red Hat and other sources corroborate thi...

EulerOS 2.0 SP3 : vim (EulerOS-SA-2019-1997)

According to the version of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that the :source! command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text fi...

The vulnerability of the getchar.c library in the Vim text editor lies in the lack of measures to neutralize special elements used in operating system commands. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the getchar.c library in the Vim text editor is related to the absence of filtering for the “!source” command. This command allows for the execution of arbitrary commands in the operating system. Exploiting this vulnerability enables a perpetrator to access confidential data,...

NewStart CGSL MAIN 4.06 : vim Vulnerability (NS-SA-2019-0177)

The remote NewStart CGSL host, running version MAIN 4.06, has vim packages installed that are affected by a vulnerability: - getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by...

Important Photon OS Security Update - PHSA-2019-0027

Updates of 'u-boot', 'ansible', 'vim' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2019-3.0-0027

Updates of 'vim', 'u-boot', 'ansible' packages of Photon OS have been released...

NewStart CGSL CORE 5.05 / MAIN 5.05 : vim Vulnerability (NS-SA-2019-0164)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has vim packages installed that are affected by a vulnerability: - It was found that the :source! command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text file in vim...

Amazon Linux 2 : vim (ALAS-2019-1239)

It was found that the :source! command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text file in vim could result in arbitrary command execution. CVE-2019-12735 C Tenable Network Security, Inc. The descriptive text and package checks in...

NewStart CGSL CORE 5.04 / MAIN 5.04 : vim Vulnerability (NS-SA-2019-0161)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has vim packages installed that are affected by a vulnerability: - It was found that the :source! command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text file in vim...

Debian DLA-1871-1 : vim security update

Several minor issues have been fixed in vim, a highly configurable text editor. CVE-2017-11109 Vim allows attackers to cause a denial of service invalid free or possibly have unspecified other impact via a crafted source aka -S file. CVE-2017-17087 Vim sets the group ownership of a .swp file to t...