PT-2023-5106 · Vim+7 · Vim+7
Publicado
2023-09-02
·
Atualizado
2024-06-15
·
CVE-2023-4735
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
vim versions prior to 9.0.1847
Description
The issue is related to an out-of-bounds write in the vim text editor, which can allow an attacker to execute arbitrary code. This is a result of a buffer overflow in memory.
Recommendations
For versions prior to 9.0.1847, update to version 9.0.1847 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and minimizing the use of the vim editor until the update is applied.
Exploit
Correção
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Debian
Linuxmint
Apple Macos
Red Os
Suse
Ubuntu
Vim