CVE-2022-0261 log
Source |
|
Severity | High |
Remote | No |
Type | Arbitrary code execution |
Description | heap based out-of-bounds write in vim's ops.c allows an attacker to trick a user to open a crafted file triggering an out-of-bounds write capable of crashing software, modify memory, and possible code execution |
Group | Package | Affected | Fixed | Severity | Status | Ticket |
---|---|---|---|---|---|---|
AVG-2738 | gvim, vim | 8.2.4150-1 | 8.2.4151-1 | High | Fixed |
References |
---|
https://github.com/vim/vim/commit/9f8c304c8a390ade133bac29963dc8e56ab14cbc https://huntr.dev/bounties/fa795954-8775-4f23-98c6-d4d4d3fe8a82 |