Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitylow

[vim-security] Ex Command Injection in sign_jump() in Vim < v9.2.1090

oss-security ()1
Read at seclists.org
AI summary · glm-5.3Summaries by Vani AI

Vim sign_jump() before v9.2.1090 permits Ex command injection via unescaped buffer names; low-severity patch disclosed by Christian Brabandt.

Christian Brabandt disclosed an Ex command injection vulnerability in Vim's sign_jump() function affecting versions before v9.2.1090, caused by improper neutralization of unescaped buffer names. The issue is rated Low severity and maps to CWE-88 (argument injection) and CWE-94 (code injection). A CVE has been requested but not yet assigned.

Key facts
  • Ex command injection via unescaped buffer name in sign_jump().
  • Affects Vim versions before v9.2.1090.
  • Rated low severity; CVE requested but not yet assigned.
  • Classified as CWE-88 and CWE-94.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
argument-injectioncode-injectioncommand-injectioneditorpatchvim

From the original article

Posted by Christian Brabandt on Sep 12 Ex Command Injection via Unescaped Buffer Name in sign_jump() in Vim < v9. 2. 1090 ================================================================================ Date: 12.

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.