CVE Catalog
CVE-2017-6349
CriticalSummary
An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
Risk Assessment
Buffer overflow may lead to unauthorized memory access, posing a risk of executing malicious code and potentially taking control of the system.
Recommendation
It is recommended to update vim to version 8.0.0377 or later to mitigate this vulnerability.
Original NVD description (English source)
An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.