CVE-2015-5309: Undefined Security Weakness

Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via an ECH erase characters escape sequence with a large parameter value, which triggers a buffer underflow...

DSA-3409-1 putty - security update

Bulletin has no description...

Debian DLA-347-1 : putty security update

It was discovered that PuTTY's terminal emulator did not properly validate the parameter to the ECH erase characters control sequence, allowing a denial of service and possibly remote code execution. For the oldoldstable distribution squeeze, this problem has been fixed in version...

[SECURITY] [DLA 347-1] putty security update

Package : putty Version : 0.60+2010-02-20-1+squeeze4 CVE ID : CVE-2015-5309 It was discovered that PuTTYs terminal emulator did not properly validate the parameter to the ECH erase characters control sequence, allowing a denial of service and possibly remote code execution...

DLA-347-1 putty - security update

Bulletin has no description...

openSUSE Security Update : putty (openSUSE-2015-766)

PuTTY was updated to 0.66 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-5309: Malicious ECH control sequences could have caused an integer overflow, buffer underrun in terminal emulator bnc954191 Also contains all bug fixes up to the 0.66 release...

putty: arbitrary code execution

A potential memory-corrupting integer overflow has been discovered in the handling of the ECH erase characters control sequence in the terminal emulator. To exploit a vulnerability in the terminal emulator, an attacker must be able to insert a carefully crafted escape sequence into the terminal...

Updated putty packages fix security vulnerability

Versions of PuTTY 0.54 and 0.65 inclusive have a potentially memory-corrupting integer overflow in the handling of the ECH erase characters control sequence in the terminal emulator CVE-2015-5309...

PT-2015-6845

Name of the Vulnerable Software and Affected Versions PuTTY versions prior to 0.66 Description The issue is related to an integer overflow in the terminal emulator, which can be triggered by a remote attacker using an ECH erase characters escape sequence with a large parameter value. This can cau...

FreeBSD : PuTTY -- memory corruption in terminal emulator's erase character handling (0cb0afd9-86b8-11e5-bf60-080027ef73ec)

Ben Harris reports : Versions of PuTTY and pterm between 0.54 and 0.65 inclusive have a potentially memory-corrupting integer overflow in the handling of the ECH erase characters control sequence in the terminal emulator. To exploit a vulnerability in the terminal emulator, an attacker must be ab...

PuTTY -- memory corruption in terminal emulator's erase character handling

Ben Harris reports: Versions of PuTTY and pterm between 0.54 and 0.65 inclusive have a potentially memory-corrupting integer overflow in the handling of the ECH erase characters control sequence in the terminal emulator. To exploit a vulnerability in the terminal emulator, an attacker must be abl...

Fedora 21 : audit-2.4.4-1.fc21 (2015-13471)

This update fixes CVE-2015-5186. The issue is that ausearch/report did not escape terminal emulator sequences when interpreting untrusted data. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

ZOC Terminal Emulator 7 - Quick Connection Crash (PoC)

ZOC Terminal Emulator 7 - Quick Connection Crash PoC !/usr/bin/python + Author: SATHISH ARTHAR + Exploit Title: ZOC Terminal Emulator-v7 Memory Corruption PoC + Date: 14-07-2015 + Category: DoS/PoC + Tested on: WinXp/Windows7/windows8 + Vendor: http://www.emtec.com + Download:...

ZOC Terminal Emulator 7 - Quick Connection Crash (PoC)

!/usr/bin/python + Author: SATHISH ARTHAR + Exploit Title: ZOC Terminal Emulator-v7 Memory Corruption PoC + Date: 14-07-2015 + Category: DoS/PoC + Tested on: WinXp/Windows7/windows8 + Vendor: http://www.emtec.com + Download: http://www.emtec.com/downloads/zoc/zoc7051.exe + Sites:...

[SECURITY] Fedora 21 Update: xterm-308-3.fc21

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly...

[SECURITY] Fedora 20 Update: xterm-297-2.fc20

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly...

[SECURITY] Fedora 20 Update: konsole-4.14.1-2.fc20

KDE Terminal emulator...

Eterm 0.8.10,rxvt 2.6.1,PuTTY 0.48,X11R6 3.3.3/4.0 - Denial of Service

No description provided by source. source: http://www.securityfocus.com/bid/1298/info xterm is a popular X11-based terminal emulator. If VT control-characters are displayed in the xterm, they can be interpreted and used to cause a denial of service attack against the client and even the host...

DEBIAN-CVE-2011-2198

The "insert-blank-characters" capability in caps.c in gnome-terminal vte before 0.28.1 allows remote authenticated users to cause a denial of service CPU and memory consumption and crash via a crafted file, as demonstrated by a file containing the string "\033100000000000000000@"...

[SECURITY] Fedora 20 Update: rxvt-unicode-9.20-1.fc20

rxvt-unicode is a clone of the well known terminal emulator rxvt, modified to store text in Unicode either UCS-2 or UCS-4 and to use locale-correct inp ut and output. It also supports mixing multiple fonts at the same time, includ ing Xft fonts...