Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68100
HistoryJul 12, 2022 - 12:00 a.m.

Vim Buffer Overflow Vulnerability (CNVD-2022-68100)

2022-07-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
vim
buffer overflow
vulnerability
version 9.0.0045
boundary error
ins_compl_add function
untrusted input
remote attacker
arbitrary code
execute

EPSS

0.001

Percentile

47.0%

Vim is a cross-platform text editor. buffer overflow vulnerability exists in versions of Vim prior to 9.0.0045, which stems from a boundary error in the ins_compl_add function when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system.