CVE-2024-38395

2024-06-1600:00:00

mitre

www.cve.org

iterm2

vulnerability

window title

setting

remote code execution

0.0004 Low

EPSS

Percentile

15.6%

JSON

In iTerm2 before 3.5.2, the “Terminal may report window title” setting is not honored, and thus remote code execution might occur but “is not trivially exploitable.”

References

www.openwall.com/lists/oss-security/2024/06/17/1

gitlab.com/gnachman/iterm2/-/commit/f1e89f78dd72dcac3ba66d3d6f93db3f7f649219

gitlab.com/gnachman/iterm2/-/tags/v3.5.2

iterm2.com/downloads.html

www.openwall.com/lists/oss-security/2024/06/15/1

0.0004 Low

EPSS

Percentile

15.6%

JSON

Related for CVELIST:CVE-2024-38395