cve/2022/CVE-2022-1381.md

19 lines
805 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2022-1381](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1381)
![](https://img.shields.io/static/v1?label=Product&message=vim%2Fvim&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%208.2.4763%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-122%20Heap-based%20Buffer%20Overflow&color=brighgreen)
### Description
global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
### POC
#### Reference
- http://seclists.org/fulldisclosure/2022/Oct/41
- https://huntr.dev/bounties/55f9c0e8-c221-48b6-a00e-bdcaebaba4a4
#### Github
No PoCs found on GitHub currently.