The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade vim | Jul 30, 2024 | Dec 30, 2019 |
| Oracle Solaris | — | Upgrade editor/gvim to version 8.2.444-11.4.24.0.1.75.1 on Solaris 11.4Upgrade editor/vim/vim-core to version 8.2.444-11.4.24.0.1.75.1 on Solaris 11.4Upgrade editor/vim to version 8.2.444-11.4.24.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | Dec 30, 2019 |
| Ubuntu | — | Upgrade vim-runtimeUpgrade vim-gui-common (Ubuntu Pro)Upgrade vim-commonUpgrade vimUpgrade vim (Ubuntu Pro)Upgrade vim-common (Ubuntu Pro)Upgrade vim-runtime (Ubuntu Pro)Upgrade vim-gui-common | Mar 24, 2020 | Dec 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub