Lucene search

@huntrdevCVELIST:CVE-2023-0288

HistoryJan 13, 2023 - 12:00 a.m.

CVE-2023-0288 Heap-based Buffer Overflow in vim/vim

2023-01-1300:00:00

CWE-122

@huntrdev

www.cve.org

buffer overflow

vim

security vulnerability

github repository

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

50.4%

JSON

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.

CNA Affected

[
  {
    "vendor": "vim",
    "product": "vim/vim",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "9.0.1189",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2023/Mar/17

github.com/vim/vim/commit/232bdaaca98c34a99ffadf27bf6ee08be6cc8f6a

huntr.dev/bounties/550a0852-9be0-4abe-906c-f803b34e41d3

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WYC22GGZ6QA66HLNLHCTAJU265TT3O33/

support.apple.com/kb/HT213670

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

50.4%

JSON

Related for CVELIST:CVE-2023-0288