CVE-2022-4293
05.12.2022, 19:15
Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| vim | vim | 𝑥 < 9.0.0804 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| gvim |
| ||||||||||||||||||||||||||||||||||||||||||||
| vim |
| ||||||||||||||||||||||||||||||||||||||||||||
| vim-data |
| ||||||||||||||||||||||||||||||||||||||||||||
| vim-data-common |
| ||||||||||||||||||||||||||||||||||||||||||||
| vim-small |
|
Common Weakness Enumeration
- CWE-1077 - Floating Point Comparison with Incorrect OperatorThe code performs a comparison such as an equality test between two float (floating point) values, but it uses comparison operators that do not account for the possibility of loss of precision.
- CWE-697 - Incorrect ComparisonThe software compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.
References