CVE-2023-4736: Untrusted Search Path in vim/vim

Reference Links

• https://github.com/vim/vim/commit/816fbcc262687b81fc46f82f7bbeb1453addfe0c
• https://huntr.dev/bounties/e1ce0995-4df4-4dec-9cd7-3136ac3e8e71
• https://support.apple.com/kb/HT213984
• http://seclists.org/fulldisclosure/2023/Oct/24
• https://support.apple.com/en-us/HT213984 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• HT213984

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-30774
• CVE-2023-40444
• CVE-2023-42952
• CVE-2023-42945
• CVE-2023-41072
• CVE-2023-42857
• CVE-2023-40449
• CVE-2023-42823
• CVE-2023-41989
• CVE-2023-42854
• CVE-2023-40413
• CVE-2023-42834
• CVE-2023-42844
• CVE-2023-42953
• CVE-2023-40416
• CVE-2023-42848
• CVE-2023-40423
• CVE-2023-38403
• CVE-2023-42849
• CVE-2023-42850
• CVE-2023-40446
• CVE-2023-42942
• CVE-2023-42861
• CVE-2023-42935
• CVE-2023-40408
• CVE-2023-40405
• CVE-2023-28826
• CVE-2023-42856
• CVE-2023-40404
• CVE-2023-42859
• CVE-2023-42877
• CVE-2023-42840
• CVE-2023-42853
• CVE-2023-42860
• CVE-2023-42889
• CVE-2023-42847
• CVE-2023-42845
• CVE-2023-42841
• CVE-2023-42873
• CVE-2023-42838
• CVE-2023-42835
• CVE-2023-41977
• CVE-2023-42438
• CVE-2023-42836
• CVE-2023-42839
• CVE-2023-42878
• CVE-2023-41982
• CVE-2023-41997
• CVE-2023-41988
• CVE-2023-42946
• CVE-2023-36191
• CVE-2023-40421
• CVE-2023-42842
• CVE-2023-4733
• CVE-2023-4734
• CVE-2023-4735
• CVE-2023-4736
• CVE-2023-4738
• CVE-2023-4750
• CVE-2023-4751
• CVE-2023-4752
• CVE-2023-4781
• CVE-2023-41254
• CVE-2023-40447
• CVE-2023-41976
• CVE-2023-42852
• CVE-2023-42843
• CVE-2023-41983
• CVE-2023-41975
• CVE-2023-42858

Frequently Asked Questions

• What is the severity of CVE-2023-4736?

  The severity of CVE-2023-4736 is high.

• What is the description of CVE-2023-4736?

  CVE-2023-4736 is a vulnerability in the GitHub repository vim/vim prior to 9.0.1833, which allows an attacker to exploit an untrusted search path.

• How does CVE-2023-4736 affect Vim?

  CVE-2023-4736 affects Vim versions prior to 9.0.1833.

• How can I fix CVE-2023-4736?

  To fix CVE-2023-4736, update Vim to version 9.0.1833 or above.

• Where can I find more information about CVE-2023-4736?

  You can find more information about CVE-2023-4736 at the following references: [Reference 1](https://github.com/vim/vim/commit/816fbcc262687b81fc46f82f7bbeb1453addfe0c), [Reference 2](https://huntr.dev/bounties/e1ce0995-4df4-4dec-9cd7-3136ac3e8e71).