Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-48231

Опубликовано: 16 нояб. 2023
Источник: nvd
CVSS3: 3.9
CVSS3: 4.3
EPSS Низкий

Описание

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*
Версия до 9.0.2106 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

EPSS

Процентиль: 16%
0.00052
Низкий

3.9 Low

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 3.9
ubuntu
около 2 лет назад

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 4.3
redhat
около 2 лет назад

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 4.3
msrc
около 2 лет назад

Use-After-Free in win_close() in vim

CVSS3: 3.9
debian
около 2 лет назад

Vim is an open source command line text editor. When closing a window, ...

CVSS3: 4.3
fstec
около 2 лет назад

Уязвимость функции win_close() текстового редактора vim, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность данных

EPSS

Процентиль: 16%
0.00052
Низкий

3.9 Low

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-416