Code injection

Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...

CVE-2015-8971

Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...

DEBIAN-CVE-2015-8971

Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...

UBUNTU-CVE-2015-8971

Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...

CVE-2015-8971

Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...

CVE-2015-8971

Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...

CVE-2016-9109

Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...

CVE-2016-9109

Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...

CVE-2016-9109

Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...

UBUNTU-CVE-2016-9109

Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...

CVE-2016-9109

CVE-2016-9109 affects Artifex Software MuJS (MuJS chartorune function). The vulnerability arises from an incomplete escape-sequence handling fix (note: linked to CVE-2016-7563), enabling a denial-of-service crash via specific input vectors. Public documents do not specify affected versions, patch...

CVE-2016-9109

Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...

PT-2017-7508 · Enlightenment +1 · Terminology +1

Name of the Vulnerable Software and Affected Versions: Terminology version 0.7.0 Description: The issue allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal. This is similar to a previously known issue...

DSA-3712-1 terminology - security update

Bulletin has no description...

Mageia: Security Advisory (MGASA-2015-0333)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 201406-18

Gentoo Linux Local Security Checks GLSA 201406-18 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Updated audit packages fix security vulnerability

When auditing the filesystem the names of files are logged. These filenames can contain escape sequences, when viewed using the ausearch programs "-i" option for example this can result in the escape sequences being processed unsafely by the terminal program being used to view the data...

MGASA-2015-0333 Updated audit packages fix security vulnerability

When auditing the filesystem the names of files are logged. These filenames can contain escape sequences, when viewed using the ausearch programs "-i" option for example this can result in the escape sequences being processed unsafely by the terminal program being used to view the data...

CVE-2015-6565

sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service terminal disruption or possibly have unspecified other impact by writing to a device, as demonstrated by writing an escape sequence...

Check Point FW-1 Syslog Daemon Unfiltered Escape Sequence Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7161/info An issue has been discovered in Check Point FW-1 syslog daemon when attempting to process a malicious, remotely supplied, syslog message. Specifically, some messages containing escape sequences are not properly...