[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2023-1975 --- vim

ID: oval:org.secpod.oval:def:1701199Date: (C)2023-03-14   (M)2024-02-19
Class: PATCHFamily: unix




A heap buffer overflow vulnerability was found in vim's ins_compl_infercase_gettext function of the src/insexpand.c file. This flaw occurs when vim tries to access uninitialized memory when completing a long line. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap-based buffer overflow that causes an application to crash, possibly executing code and corrupting memory. A flaw was found in vim. The vulnerability occurs due to illegal memory access and leads to a heap buffer overflow vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. A flaw was found in vim. The vulnerability occurs due to illegal memory access and leads to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. A flaw was found in vim. The vulnerability occurs due to illegal memory access and leads to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224. A heap use-after-free vulnerability was found in vim's do_tag function of the src/tag.c file. The issue triggers when the 'tagfunc' closes the window. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly executing code and corrupting memory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483. Use After Free in GitHub repository vim/vim prior to 9.0.0490. Use After Free in GitHub repository vim/vim prior to 9.0.0530. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552. Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577. Use After Free in GitHub repository vim/vim prior to 9.0.0579. Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598. Use After Free in GitHub repository vim/vim prior to 9.0.0614. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. Divide By Zero in GitHub repository vim/vim prior to 9.0.1247

Platform:
Amazon Linux 2
Product:
vim
Reference:
ALAS2-2023-1975
CVE-2022-2522
CVE-2022-2571
CVE-2022-2580
CVE-2022-2581
CVE-2022-2874
CVE-2022-3134
CVE-2022-3153
CVE-2022-3234
CVE-2022-3235
CVE-2022-3256
CVE-2022-3278
CVE-2022-3296
CVE-2022-3297
CVE-2022-3324
CVE-2022-3352
CVE-2022-3491
CVE-2022-47024
CVE-2023-0051
CVE-2023-0054
CVE-2023-0288
CVE-2023-0433
CVE-2023-0512
CVE    22
CVE-2022-3278
CVE-2022-3297
CVE-2022-3491
CVE-2022-3296
...
CPE    2
cpe:/a:vim:vim
cpe:/o:amazon:linux:2

© SecPod Technologies