CVE-2023-0288

CVSS V2 None CVSS V3 None
Description
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
Overview
  • CVE ID
  • CVE-2023-0288
  • Assigner
  • security@huntr.dev
  • Vulnerability Status
  • Modified
  • Published Version
  • 2023-01-13T16:15:08
  • Last Modified Date
  • 2023-03-28T05:15:13
Weakness Enumerations
CWE URL
CWE-122 http://cwe.mitre.org/data/definitions/122.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:* 1 OR 9.0.1189
References
Reference URL Reference Tags
http://seclists.org/fulldisclosure/2023/Mar/17
https://github.com/vim/vim/commit/232bdaaca98c34a99ffadf27bf6ee08be6cc8f6a Patch Third Party Advisory
https://huntr.dev/bounties/550a0852-9be0-4abe-906c-f803b34e41d3 Exploit Issue Tracking Patch Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WYC22GGZ6QA66HLNLHCTAJU265TT3O33/
https://support.apple.com/kb/HT213670
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-0288
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0288
History
Created Old Value New Value Data Type Notes
2023-01-13 16:17:48 Added to TrackCVE
2023-01-13 16:17:49 Weakness Enumeration new
2023-01-13 19:14:46 2023-01-13T18:23:08 CVE Modified Date updated
2023-01-13 19:14:46 Received Awaiting Analysis Vulnerability Status updated
2023-01-13 19:14:48 CVSS V3 information new
2023-01-19 20:14:11 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-19 20:14:14 CVSS V3 information new
2023-01-20 08:14:05 2023-01-20T07:54:08 CVE Modified Date updated
2023-01-20 08:14:05 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-20 08:14:08 CPE Information updated
2023-01-20 08:14:08 CVSS V3 information new
2023-02-03 05:14:28 2023-02-03T04:15:11 CVE Modified Date updated
2023-02-03 05:14:28 Analyzed Modified Vulnerability Status updated
2023-02-03 05:14:29 References updated
2023-02-03 05:14:29 CVSS V3 information new
2023-03-28 02:15:41 2023-03-28T02:15:13 CVE Modified Date updated
2023-03-28 02:15:41 References updated
2023-03-28 02:15:41 CVSS V3 information new
2023-03-28 05:16:51 2023-03-28T05:15:13 CVE Modified Date updated
2023-03-28 05:16:52 References updated
2023-03-28 05:16:52 CVSS V3 information new