• CVE-2025-24014

发布时间: 2025年2月15日

修改时间: 2025年2月15日

概要

Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters to Vim. The function that handles the scrolling however may be triggering a redraw, which will access the ScreenLines pointer, even so this variable hasn't been allocated (since there is no screen). This vulnerability is fixed in 9.1.1043.

CVSS v3 指标

NVD openEuler
Confidentiality Low
Attack Vector Local
CVSS评分 N/A 4.2
Attack Complexity High
Privileges Required Low
Scope Unchanged
Integrity Low
User Interaction Required
Availability Low

安全公告

公告名 概要 发布时间
KylinSec-SA-2025-1632 vim security update 2025年3月18日

影响产品

产品 状态
KY3.4-5A vim Fixed
KY3.5.3 vim Fixed
V6 vim Fixed