Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-09166
HistoryJan 05, 2023 - 12:00 a.m.

Binary vulnerability exists in vim (CNVD-2023-09166)

2023-01-0500:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
vim
binary vulnerability
cross-platform
text editor
out-of-bounds memory write
do_string_sub
denial of service
code execution

0.001 Low

EPSS

Percentile

36.1%

Vim is a cross-platform text editor. A security vulnerability exists in Vim, which stems from an out-of-bounds memory write in the function do_string_sub, and can be exploited by an attacker to trigger a denial of service and potentially run code.

CPENameOperatorVersion
vim vimeq9.0.1144