CVE-2022-3324

Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.0598

Description The issue is related to a stack-based buffer overflow in the vim text editor. It is associated with the win redr ruler() function, which can cause a buffer overflow when using a negative array index with a window of negative width. This can lead to a denial of service or allow an attacker to execute arbitrary code using a specially crafted file.

Recommendations For versions prior to 9.0.0598, update to version 9.0.0598 or later to resolve the issue. As a temporary workaround, consider restricting the use of the win redr ruler() function until a patch is available.