Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-2713

Опубликовано: 05 авг. 2010
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a (1) window title or (2) icon title sequence. NOTE: this issue exists because of a CVE-2003-0070 regression.

Комментарий

Per: http://cwe.mitre.org/data/definitions/77.html

'CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')'

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:nalin_dahyabhai:vte:*:*:*:*:*:*:*:*
Версия до 0.25.1 (включая)
cpe:2.3:a:nalin_dahyabhai:vte:0.11.21:*:*:*:*:*:*:*
cpe:2.3:a:nalin_dahyabhai:vte:0.12.2:*:*:*:*:*:*:*
cpe:2.3:a:nalin_dahyabhai:vte:0.14.2:*:*:*:*:*:*:*
cpe:2.3:a:nalin_dahyabhai:vte:0.15.0:*:*:*:*:*:*:*
cpe:2.3:a:nalin_dahyabhai:vte:0.16.14:*:*:*:*:*:*:*
cpe:2.3:a:nalin_dahyabhai:vte:0.17.4:*:*:*:*:*:*:*
cpe:2.3:a:nalin_dahyabhai:vte:0.20.5:*:*:*:*:*:*:*
cpe:2.3:a:nalin_dahyabhai:vte:0.22.5:*:*:*:*:*:*:*
cpe:2.3:a:nalin_dahyabhai:vte:0.24.3:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gnome-terminal:*:*:*:*:*:*:*:*

EPSS

Процентиль: 75%
0.00873
Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu логотип

CVE-2010-2713

ubuntu
больше 15 лет назад

The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a (1) window title or (2) icon title sequence. NOTE: this issue exists because of a CVE-2003-0070 regression.

redhat логотип

CVE-2010-2713

redhat
больше 15 лет назад

The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a (1) window title or (2) icon title sequence. NOTE: this issue exists because of a CVE-2003-0070 regression.

debian логотип

CVE-2010-2713

debian
больше 15 лет назад

The vte_sequence_handler_window_manipulation function in vteseq.c in l ...

github логотип

GHSA-h3vh-54q4-255x

github
больше 3 лет назад

The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a (1) window title or (2) icon title sequence. NOTE: this issue exists because of a CVE-2003-0070 regression.

EPSS

Процентиль: 75%
0.00873
Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other