The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
References
Configurations
Configuration 1 (hide)
|
History
22 Aug 2024, 15:35
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-150 | |
CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 7.3 |
15 Jun 2024, 10:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2003-03-03 05:00
Updated : 2024-08-22 15:35
NVD link : CVE-2003-0063
Mitre link : CVE-2003-0063
CVE.ORG link : CVE-2003-0063
JSON object : View
Products Affected
xfree86_project
- x11r6
CWE