PT-2023-26807 · Conemu · Conemu

Maximus5 · Publicado 2023-09-12 · Atualizado 2023-10-05 · CVE-2023-39150

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ConEmu versions prior to commit 230724

Description The issue is related to the incorrect sanitization of title responses for control characters, potentially leading to arbitrary code execution. This is connected to an incomplete fix for a previous issue.

Recommendations For ConEmu versions prior to commit 230724, update to a version that includes the commit 230724 or later to resolve the issue. As a temporary workaround, consider disabling the handling of title responses until a patch is available. Restrict access to potentially vulnerable features to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2023-39150

Produtos afetados

Conemu

Referências · 7

• https://github.com/Maximus5/ConEmu/commit/60683a186628ffaa7689fcb64b3c38ced69287c1 · Correção
• https://twitter.com/CVEnew/status/1701573426698211480 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1701606862498714057 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-39150 · Aviso do Fabricante
• https://gist.github.com/dgl/081cf503dc635df39d844e058a6d4c88 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-39150 · Nota de Segurança
• https://t.me/cibsecurity/70279 · Publicação no Telegram