PT-2023-3587 · Vim+7 · Vim+7

Brammool

·

Publicado

2023-02-21

·

Atualizado

2025-03-30

·

CVE-2023-2610

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.1532
Description The issue is related to an integer overflow or wraparound in the Vim text editor. Exploitation of this issue may allow an attacker to access confidential data, compromise data integrity, and cause a denial of service.
Recommendations For versions prior to 9.0.1532, update to version 9.0.1532 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this issue.

Exploit

Correção

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2023-1955
ALT-PU-2023-2008
ALT-PU-2023-2024
ALT-PU-2023-2089
AZL-26652
BDU:2023-03861
CVE-2023-2610
DLA-3453-1
DLA-4097-1
OESA-2023-1281
OPENSUSE-SU-2023_2640-1
OPENSUSE-SU-2023_3497-1
SUSE-SU-2023:2640-1
SUSE-SU-2023:3463-1
SUSE-SU-2023:3497-1
USN-6154-1

Produtos afetados

Alt Linux
Astra Linux
Debian
Linuxmint
Apple Macos
Suse
Ubuntu
Vim