An integer overflow flaw was found in the way vim handled tree length values when reading an undo file. This bug could result in vim crashing when trying to process corrupted undo files.
Platform | Package | Release Date | Advisory |
---|---|---|---|
Amazon Linux 1 | vim | 2017-03-29 16:45 | ALAS-2017-809 |
Score Type | Score | Vector | |
---|---|---|---|
Amazon Linux | CVSSv3 | 2.5 | CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L |
NVD | CVSSv2 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
NVD | CVSSv3 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |