CVE:CVE-2022-1720
CNNVD:CNNVD-202206-2058
Vim是一款跨平台的文本编辑器。
Vim 8.2.4956之前版本存在缓冲区错误漏洞，该漏洞源于 grab_file_name 函数存在缓冲区过度读取情况，从而导致软件崩溃、内存修改和可能的远程执行。
solution:Upgrade vim vim to a higher version than 8.2.4956,and avoid the version (,8.2.4956); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 35,36,and avoid the version 35,36; Upgrade apple macos to a higher version than 11.7,12.6,and avoid the version (,11.7),[12.0,12.6)