CVE-2003-0063

2003-03-0305:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2003-0063

xterm terminal

xfree86

security vulnerability

command execution

nvd

7.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.1%

JSON

The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user’s terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.

CPENameOperatorVersion
xfree86_project:x11r6xfree86 project x11r6eq4.1.0
xfree86_project:x11r6xfree86 project x11r6eq4.0.3
xfree86_project:x11r6xfree86 project x11r6eq4.2.1
xfree86_project:x11r6xfree86 project x11r6eq4.0
xfree86_project:x11r6xfree86 project x11r6eq4.0.1
xfree86_project:x11r6xfree86 project x11r6eq4.2.0

CPE	Name	Operator	Version
xfree86_project:x11r6	xfree86 project x11r6	eq	4.1.0
xfree86_project:x11r6	xfree86 project x11r6	eq	4.0.3
xfree86_project:x11r6	xfree86 project x11r6	eq	4.2.1
xfree86_project:x11r6	xfree86 project x11r6	eq	4.0
xfree86_project:x11r6	xfree86 project x11r6	eq	4.0.1
xfree86_project:x11r6	xfree86 project x11r6	eq	4.2.0