cve-2019-12735

Docker image that lets me study the exploitation of the VIM exploit here

Affected Software

• Vim 8.1.1365 (up to and excluding)
• NeoVim 0.3.6 (up to and excluding)

Install

# on Host
$ make build
$ make run
$ make attach   # This brings you into the container with the vulnerable Vim

# In docker container
$ vim exploit/poc.txt

Fix

The commit that fixes it.

Credits

Environment setup inspired by LiveOverflow's pwnedit