CVE-2023-0512

HIGH

Vim < 9.0.1247 - Divide By Zero

Title source: rule

Description

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.

References (9)

[Mailing List] http://seclists.org/fulldisclosure/2023/Mar/17

[Mailing List] http://seclists.org/fulldisclosure/2023/Mar/18

[Patch, Third Party Advisory] https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835

View Patch ZIP pw:eip

[Exploit, Patch, Third Party Advisory] https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/

[Mailing List] http://seclists.org/fulldisclosure/2023/Mar/21

[Vendor Advisory] https://support.apple.com/kb/HT213670

[Vendor Advisory] https://support.apple.com/kb/HT213675

[Vendor Advisory] https://support.apple.com/kb/HT213677

Scores

CVSS v3 7.8

EPSS 0.0003

EPSS Percentile 9.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE

CWE-369

Status published

Affected Products (1)

vim/vim < 9.0.1247

Timeline

Published Jan 30, 2023

Tracked Since Feb 18, 2026