Lucene search

MitreCVE-2014-3121

HistoryMay 14, 2014 - 12:55 a.m.

CVE-2014-3121

2014-05-1400:55:10

CWE-78

mitre

web.nvd.nist.gov

rxvt-unicode

vulnerability

osc escape sequences

cve-2014-3121

nvd

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.1

Confidence

Low

EPSS

0.015

Percentile

87.0%

JSON

rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands.

Affected configurations

Nvd

Node

marc_lehmannrxvt-unicodeRange≤9.19

marc_lehmannrxvt-unicodeMatch9.0

marc_lehmannrxvt-unicodeMatch9.01

marc_lehmannrxvt-unicodeMatch9.02

marc_lehmannrxvt-unicodeMatch9.05

marc_lehmannrxvt-unicodeMatch9.06

marc_lehmannrxvt-unicodeMatch9.07

marc_lehmannrxvt-unicodeMatch9.08

marc_lehmannrxvt-unicodeMatch9.09

marc_lehmannrxvt-unicodeMatch9.10

marc_lehmannrxvt-unicodeMatch9.11

marc_lehmannrxvt-unicodeMatch9.12

marc_lehmannrxvt-unicodeMatch9.14

marc_lehmannrxvt-unicodeMatch9.15

marc_lehmannrxvt-unicodeMatch9.16

marc_lehmannrxvt-unicodeMatch9.17

marc_lehmannrxvt-unicodeMatch9.18

VendorProductVersionCPE
marc_lehmannrxvt-unicode*cpe:2.3:a:marc_lehmann:rxvt-unicode:*:*:*:*:*:*:*:*
marc_lehmannrxvt-unicode9.0cpe:2.3:a:marc_lehmann:rxvt-unicode:9.0:*:*:*:*:*:*:*
marc_lehmannrxvt-unicode9.01cpe:2.3:a:marc_lehmann:rxvt-unicode:9.01:*:*:*:*:*:*:*
marc_lehmannrxvt-unicode9.02cpe:2.3:a:marc_lehmann:rxvt-unicode:9.02:*:*:*:*:*:*:*
marc_lehmannrxvt-unicode9.05cpe:2.3:a:marc_lehmann:rxvt-unicode:9.05:*:*:*:*:*:*:*
marc_lehmannrxvt-unicode9.06cpe:2.3:a:marc_lehmann:rxvt-unicode:9.06:*:*:*:*:*:*:*
marc_lehmannrxvt-unicode9.07cpe:2.3:a:marc_lehmann:rxvt-unicode:9.07:*:*:*:*:*:*:*
marc_lehmannrxvt-unicode9.08cpe:2.3:a:marc_lehmann:rxvt-unicode:9.08:*:*:*:*:*:*:*
marc_lehmannrxvt-unicode9.09cpe:2.3:a:marc_lehmann:rxvt-unicode:9.09:*:*:*:*:*:*:*
marc_lehmannrxvt-unicode9.10cpe:2.3:a:marc_lehmann:rxvt-unicode:9.10:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
marc_lehmann	rxvt-unicode	*	cpe:2.3:a:marc_lehmann:rxvt-unicode::::::::
marc_lehmann	rxvt-unicode	9.0	cpe:2.3:a:marc_lehmann:rxvt-unicode:9.0:::::::*
marc_lehmann	rxvt-unicode	9.01	cpe:2.3:a:marc_lehmann:rxvt-unicode:9.01:::::::*
marc_lehmann	rxvt-unicode	9.02	cpe:2.3:a:marc_lehmann:rxvt-unicode:9.02:::::::*
marc_lehmann	rxvt-unicode	9.05	cpe:2.3:a:marc_lehmann:rxvt-unicode:9.05:::::::*
marc_lehmann	rxvt-unicode	9.06	cpe:2.3:a:marc_lehmann:rxvt-unicode:9.06:::::::*
marc_lehmann	rxvt-unicode	9.07	cpe:2.3:a:marc_lehmann:rxvt-unicode:9.07:::::::*
marc_lehmann	rxvt-unicode	9.08	cpe:2.3:a:marc_lehmann:rxvt-unicode:9.08:::::::*
marc_lehmann	rxvt-unicode	9.09	cpe:2.3:a:marc_lehmann:rxvt-unicode:9.09:::::::*
marc_lehmann	rxvt-unicode	9.10	cpe:2.3:a:marc_lehmann:rxvt-unicode:9.10:::::::*