CVE-2010-2713
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.3%
The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a (1) window title or (2) icon title sequence. NOTE: this issue exists because of a CVE-2003-0070 regression.
Produtos afetados
n/a · n/aReferências
http://git.gnome.org/browse/vte/commit/?id=8b971a7b2c59902914ecbbc3915c45dd21530a91http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=613110http://secunia.com/advisories/40635http://www.securityfocus.com/bid/41716http://www.ubuntu.com/usn/usn-962-1http://www.vupen.com/english/advisories/2010/1839