59 matches found
CVE-2022-41138
In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution...
CVE-2022-41138
CVE-2022-41138 (Zutty) affects Zutty prior to 0.13, where DECRQSS sequences written to the terminal can lead to arbitrary code execution. The CVE entry notes a CRITICAL base score (9.8) with network-based, no-auth, no-user-interaction exploitation and high impact across confidentiality, integrity...
CVE-2022-41138
In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution...
CVE-2022-41138: Improper Control of Generation of Code
In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution...
PT-2022-25669 · Zutty · Zutty
Name of the Vulnerable Software and Affected Versions: Zutty versions prior to 0.13 Description: The issue allows arbitrary code execution through DECRQSS in text written to the terminal. Recommendations: For versions prior to 0.13, update to version 0.13 or later to resolve the issue...
Zutty 安全漏洞
Zutty is an X terminal rendering emulator via OpenGL ES Compute Shaders by Tom Szilagyi, a solo developer. A security vulnerability exists in Zutty versions prior to 0.13, which stems from a DECRQSS write terminal in text to enable arbitrary code execution...
CRLF Injection
Xterm is vulnerable to CRLF Injection. A flaw was found in the xterm handling of Device Control Request Status String DECRQSS escape sequences. An attacker could create a malicious text file or log entry, if unfiltered that could run arbitrary commands if read by a victim inside an xterm window...
Oracle Linux 5 : xterm (ELSA-2009-0018)
The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-0018 advisory. 215-5.el52.2 - Fix CVE-2008-2383 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...
Scientific Linux Security Update : xterm on SL3.x, SL4.x, SL5.x i386/x86_64
A flaw was found in the xterm handling of Device Control Request Status String DECRQSS escape sequences. An attacker could create a malicious text file or log entry, if unfiltered that could run arbitrary commands if read by a victim inside an xterm window. CVE-2008-2383 %NASLMINLEVEL 70300 C...
CentOS Update for hanterm-xf CESA-2009:0019-01 centos2 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : xterm vulnerabilities (USN-703-1)
Paul Szabo discovered that the DECRQSS escape sequences were not handled correctly by xterm. Additionally, window title operations were also not safely handled. If a user were tricked into viewing a specially crafted series of characters while in xterm, a remote attacker could execute arbitrary...
Fedora 10 : xterm-238-1.fc10 (2009-0091)
This update fixes the following security issue: CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related...
GLSA-200902-04 : xterm: User-assisted arbitrary commands execution
The remote host is affected by the vulnerability described in GLSA-200902-04 xterm: User-assisted arbitrary commands execution Paul Szabo reported an insufficient input sanitization when processing Device Control Request Status String DECRQSS sequences. Impact : A remote attacker could entice a...
xterm: User-assisted arbitrary commands execution
Background xterm is a terminal emulator for the X Window system. Description Paul Szabo reported an insufficient input sanitization when processing Device Control Request Status String DECRQSS sequences. Impact A remote attacker could entice a user to display a file containing specially crafted...
hanterm security update
CentOS Errata and Security Advisory CESA-2009:0019-01 An updated hanterm-xf package to correct a security issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. Hanterm is a replacement for...
Fedora 9 : xterm-238-1.fc9 (2009-0059)
This update fixes the following security issue: CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related...
Mandrake Security Advisory MDVSA-2009:005 (xterm)
The remote host is missing an update to xterm announced via advisory MDVSA-2009:005. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mandrake Security Advisory MDVSA-2009:005 (xterm)
The remote host is missing an update to xterm announced via advisory MDVSA-2009:005. OpenVAS Vulnerability Test $Id: mdksa2009005.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:005 xterm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CentOS 3 / 4 / 5 : xterm (CESA-2009:0018)
An updated xterm package to correct a security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The xterm program is a terminal emulator for the X Window System. A flaw was found ...
xterm security update
CentOS Errata and Security Advisory CESA-2009:0018 An updated xterm package to correct a security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The xterm program is a terminal...