CVE-2021-3928

Related Vulnerabilities: CVE-2021-3928  

A flaw was found in vim. A possible stack-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Description

A flaw was found in vim. A possible stack-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Mitigation

Do not run untrusted vim scripts with -s {scriptin} as it is never safe to do so.

Additional Information

  • Bugzilla 2021292: CVE-2021-3928 vim: stack-based buffer overflow in spell_iswordp() in spell.c
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
  • FAQ: Frequently asked questions about CVE-2021-3928