CVE-2025-1052 Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mintty. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2025-1052 Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mintty. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2025-1052

CVE-2025-1052 affects Mintty. The vulnerability arises in the sixel image parsing code, where the length of user-supplied data is not properly validated before copying into a heap-based buffer, leading to a heap-based buffer overflow and remote code execution. Impact is described as requiring use...

CVE-2025-1052 Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mintty. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

mintty 安全漏洞

mintty is the Cygwin terminal emulator for the mintty open source application, also available for MSYS and Msys2. A security vulnerability exists in mintty that stems from the failure to properly validate the length of user-supplied data before copying it to a heap-based buffer. An attacker could...

CVE-2025-1052: Heap-based Buffer Overflow

Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mintty. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mintty. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of sixel images...

PT-2025-5794 · Mintty · Mintty

Name of the Vulnerable Software and Affected Versions: Mintty affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Mintty. User interaction is required to exploit this issue, where the target must visit a malicious...

PT-2025-2686

Name of the Vulnerable Software and Affected Versions Mintty affected versions not specified Description The issue is related to improper input validation in Mintty's path conversion, allowing remote attackers to relay NTLM credentials on affected installations. This requires user interaction,...

Mintty Path Conversion Improper Input Validation Information Disclosure Vulnerability

This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Mintty. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of printed...

CVE-2023-39726

An issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via crafted commands to the terminal...

CVE-2023-39726

An issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via crafted commands to the terminal...

Design/Logic Flaw

An issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via crafted commands to the terminal...

CVE-2023-39726: Improper Neutralization of Directives in Statically Saved Code

An issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via crafted commands to the terminal...

CVE-2023-39726

An issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via crafted commands to the terminal...

PT-2023-27086 · Mintty · Mintty

Name of the Vulnerable Software and Affected Versions: Mintty versions 3.6.4 and earlier Description: An issue in Mintty allows a remote attacker to execute arbitrary code via crafted commands to the terminal. Recommendations: For Mintty versions 3.6.4 and earlier, update to a version later than...

CVE-2023-39726

An issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via crafted commands to the terminal...

Mintty Security Vulnerabilities

mintty is an application software Cygwin terminal emulator that can also be used with MSYS and Msys2. A security vulnerability exists in Mintty v.3.6.4 and earlier versions that could allow a remote attacker to execute arbitrary code via a terminal via a crafted command...

CVE-2023-39726

An issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via crafted commands to the terminal...

CVE-2023-39726

Mintty vulnerable are versions 3.6.4 and earlier to remote code execution via crafted terminal commands. The issue is reported across multiple sources (CVE-2023-39726) and the PT-2023-27086 advisory recommends upgrading to a version later than 3.6.4 to resolve the vulnerability. The connected doc...