CVE:CVE-2022-1381
CNNVD:CNNVD-202204-3649
vim是一款基于UNIX平台的编辑器。
vim 8.2.4763 之前版本存在安全漏洞，该漏洞源于软件中skip_range中存在全局堆缓冲区溢出。攻击者利用该漏洞可以导致软件崩溃、绕过保护机制、修改内存以及可能的远程执行。
solution:Upgrade vim vim to a higher version than 8.2.4763,and avoid the version (,8.2.4763); Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36; Upgrade apple macos to a higher version than 13.0,and avoid the version (,13.0)