Vulnerabilities > VIM > VIM > 7.3.022
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2017-02-27 | CVE-2017-6350 | Integer Overflow or Wraparound vulnerability in VIM An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows. | 9.8 |
2017-02-27 | CVE-2017-6349 | Integer Overflow or Wraparound vulnerability in VIM An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows. | 9.8 |
2017-02-10 | CVE-2017-5953 | Integer Overflow or Wraparound vulnerability in VIM vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow. | 9.8 |
2016-11-23 | CVE-2016-1248 | Improper Input Validation vulnerability in VIM vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened. | 6.8 |