PT-2003-1086 · N/A · Hanterm
Publicado
2003-03-18
·
Atualizado
2016-10-18
·
CVE-2003-0077
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
hanterm versions 2.0.5 and earlier
Description
The issue allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal. This could happen when the user views a file containing the malicious sequence, potentially allowing the attacker to execute arbitrary commands. Multiple vulnerabilities in the hanterm-xf package may lead to breaches of confidentiality, integrity, and availability of protected information, and exploitation can be done remotely.
Recommendations
For versions 2.0.5 and earlier, consider disabling the handling of certain character escape sequences in the terminal emulator as a temporary workaround until a patch is available. Restrict access to potentially malicious files that could contain the harmful sequences to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Hanterm