814 matches found
MGASA-2017-0193 Updated rxvt-unicode packages fix security vulnerability
The rxvt-unicode package has been patched to harden it against potential integer overflow issues when printing escape sequences...
Updated rxvt-unicode packages fix security vulnerability
The rxvt-unicode package has been patched to harden it against potential integer overflow issues when printing escape sequences...
CVE-2015-8971
Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...
UBUNTU-CVE-2015-8971
Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...
CVE-2015-8971
Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...
DEBIAN-CVE-2015-8971
Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...
Code injection
Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...
CVE-2015-8971
Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...
CVE-2015-8971
Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063...
CVE-2016-9109
Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...
CVE-2016-9109
Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...
CVE-2016-9109
Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...
UBUNTU-CVE-2016-9109
Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...
CVE-2016-9109
CVE-2016-9109 affects Artifex Software MuJS (MuJS chartorune function). The vulnerability arises from an incomplete escape-sequence handling fix (note: linked to CVE-2016-7563), enabling a denial-of-service crash via specific input vectors. Public documents do not specify affected versions, patch...
CVE-2016-9109
Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...
PT-2017-7508 · Enlightenment +1 · Terminology +1
Name of the Vulnerable Software and Affected Versions: Terminology version 0.7.0 Description: The issue allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal. This is similar to a previously known issue...
DSA-3712-1 terminology - security update
Bulletin has no description...
Mageia: Security Advisory (MGASA-2015-0333)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 201406-18
Gentoo Linux Local Security Checks GLSA 201406-18 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
MGASA-2015-0333 Updated audit packages fix security vulnerability
When auditing the filesystem the names of files are logged. These filenames can contain escape sequences, when viewed using the ausearch programs "-i" option for example this can result in the escape sequences being processed unsafely by the terminal program being used to view the data...