PT-2020-2759 · Vim+1 · Vim+1

Steve Hahn · Published 2020-04-01 · Updated 2020-04-02 · CVE-2020-9769

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vim (affected versions not specified) macOS versions prior to 10.15.4

Description The issue exists due to insufficient input validation in the Vim component of the Mac OS operating system. Exploitation of the issue may allow a remote attacker to elevate their privileges.

Recommendations For macOS versions prior to 10.15.4, update to macOS Catalina 10.15.4 to resolve the issue. For Vim, update to version 8.1.1850 to address the multiple issues.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2020-02850

CVE-2020-9769

Affected Products

Vim

Apple Macos

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-9769 · Security Note
• https://bdu.fstec.ru/vul/2020-02850 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9769 · Vendor Advisory
• https://support.apple.com/HT211100 · Vendor Advisory
• https://t.me/cvenotify/2329 · Telegram Post
• https://support.apple.com/ru-ru/HT211100 · Note