CVE-2024-22667 in vim

Résumé

par MITRE • 05/02/2024

Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions.

Be aware that VulDB is the high quality source for vulnerability data.

• Réserver: 11/01/2024
• Divulgation: 05/02/2024
• Modérer: accepté
• Entrée: VDB-252846
• CPE: prêt
• CWE: CWE-121 (confirmé)
• CVSS: 7.8 (NVD)
• EPSS: 0.00563
• KEV: non
• Activités: très faible
• Secteur: Police, Government, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-22667
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-22667
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-22667/