PT-2023-1016 · Vim+8 · Vim+8
Brammool
·
Publicado
2023-01-04
·
Atualizado
2023-10-22
·
CVE-2023-0051
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Vim versions prior to 9.0.1144
Description
The issue is related to a heap-based buffer overflow in the
msg puts printf() function of the Vim text editor, which can be exploited to execute arbitrary code on the target system. This is a result of a buffer overflow in dynamic memory. The estimated number of potentially affected devices is not specified.Recommendations
For versions prior to 9.0.1144, update to version 9.0.1191 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
msg puts printf() function until a patch is available.Exploit
Correção
Heap Based Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Debian
Linuxmint
Apple Macos
Red Os
Suse
Ubuntu
Vim