CVE Catalog
CVE-2017-6350
CriticalSummary
An integer overflow at an unserialize_uep memory allocation site occurs for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
Risk Assessment
Buffer overflow may allow an attacker to execute arbitrary code, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to update vim to version 8.0.0378 or later to mitigate this vulnerability.
Original NVD description (English source)
An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.