PT-2021-7388

CVE-2021-3973

·

Published

2021-11-13

·

Updated

2026-10-23

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions vim (affected versions not specified)
Description The issue is related to a Heap-based Buffer Overflow in the vim text editor. It is associated with incorrect handling of CTRL-W f when no file name is present. Exploitation of this issue allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2022-1087
ALT-PU-2022-1711
ALT-PU-2022-1731
ALT-PU-2022-1771
AZL-6946
CLSA-2026-1787917228
CLSA-2026-1792153017
DLA-2947-1
MGASA-2021-0535
OESA-2021-1450
OPENSUSE-SU-2022_2102-1
SUSE-SU-2022:2102-1
SUSE-SU-2022:4619-1
USN-5247-1
USN-5433-1
USN-6965-1
Found an issue in the description? Have something to add? Feel free to write us 👾