CVE-2024-38395

2024-06-1601:15:48

[email protected]

web.nvd.nist.gov

iterm2

3.5.2

terminal

window title

setting

remote code execution

7.9 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

JSON

In iTerm2 before 3.5.2, the “Terminal may report window title” setting is not honored, and thus remote code execution might occur but “is not trivially exploitable.”

References

www.openwall.com/lists/oss-security/2024/06/17/1

gitlab.com/gnachman/iterm2/-/commit/f1e89f78dd72dcac3ba66d3d6f93db3f7f649219

gitlab.com/gnachman/iterm2/-/tags/v3.5.2

iterm2.com/downloads.html

www.openwall.com/lists/oss-security/2024/06/15/1