Buffer Overflow Vulnerability in VIM by Vim Technology
CVE-2020-20703

9.8CRITICAL

Key Information:

Vendor

Vim

Status
Vim
Vendor
CVE Published:
20 June 2023

What is CVE-2020-20703?

The buffer overflow vulnerability in VIM version 8.1.2135 allows a remote attacker to exploit the operand parameter, potentially executing arbitrary code on the system. This type of vulnerability poses significant risks, as it can be exploited to gain unauthorized access or control over affected systems. Users are encouraged to update their VIM installations to mitigate any potential threats associated with this vulnerability. Further details can be found in the related GitHub issue.

References

https://github.com/vim/vim/issues/5041

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2020-20703 : Buffer Overflow Vulnerability in VIM by Vim Technology