Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37464
HistoryOct 10, 2022 - 8:15 p.m.

Stack-based Buffer Overflow

2022-10-1020:15:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
vim
buffer overflow
stack-based
drawscreen.c
vulnerability
malicious file
application crash

EPSS

0.001

Percentile

42.2%

vim is vulnerable to stack-based buffer overflow. The vulnerability exists in win_redr_ruler() function of drawscreen.c because of using a negative array index with a negative width window which allows an attacker to trick a user into opening a specially malicious file causing an application to crash.