CVE-2023-0433

Published: Jan 21, 2023

Modified: Apr 2, 2025

PUBLISHED

CVSS v3.0

7.8

HIGH

Description

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

Vendor	Product	Versions
vim	vim/vim	affected `unspecified - < 9.0.1225`

Weaknesses (CWE)

CWE-122

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

https://huntr.dev/bounties/ae933869-a1ec-402a-bbea-d51764c6618e

https://github.com/vim/vim/commit/11977f917506d950b7e0cae558bd9189260b253b

FEDORA-2023-2db4df65c3

vendor-advisory

FEDORA-2023-93fb5b08eb

vendor-advisory

https://support.apple.com/kb/HT213677

https://support.apple.com/kb/HT213675

https://support.apple.com/kb/HT213670

20230327 APPLE-SA-2023-03-27-3 macOS Ventura 13.3

mailing-list

20230327 APPLE-SA-2023-03-27-4 macOS Monterey 12.6.4

mailing-list

20230327 APPLE-SA-2023-03-27-5 macOS Big Sur 11.7.5

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-0433

Description

Affected Products

Weaknesses (CWE)

CVSS v3.0 Details

References