PT-2023-4443 · Vim+6 · Vim+6
Brammool
·
Publicado
2023-03-01
·
Atualizado
2023-10-22
·
CVE-2023-1170
CVSS v3.1
7.3
Alta
| Vetor | AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Vim versions prior to 9.0.1376
Description
The issue is related to a heap-based buffer overflow in the Vim text editor, specifically in the
utf ptr2char function of the mbyte.c component. This overflow can allow an attacker to access confidential data, compromise data integrity, and cause a denial of service.Recommendations
For versions prior to 9.0.1376, update to version 9.0.1376 or later to resolve the issue. As a temporary workaround, consider restricting access to the
mbyte.c component until a patch is applied.Exploit
Correção
Heap Based Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Debian
Linuxmint
Suse
Ubuntu
Vim