Lucene search

K
mageiaGentoo FoundationMGASA-2014-0202
HistoryMay 02, 2014 - 10:05 p.m.

Updated rxvt-unicode packages fix CVE-2014-3121

2014-05-0222:05:53
Gentoo Foundation
advisories.mageia.org
8

0.015 Low

EPSS

Percentile

86.9%

Updated rxvt-unicode package fixes security vulnerability: rxvt-unicode (aka urxvt) before 9.20 is vulnerable to a user-assisted arbitrary commands execution issue. This can be exploited by the unprocessed display of certain escape sequences in a crafted text file or program output. Arbitrary command sequences can be constructed using this, and unintentionally executed if used in conjunction with various other escape sequences (CVE-2014-3121).