Vulnerabilities (CVE)

Filtered by vendor Invisible-island Subscribe
Filtered by product Xterm
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-2383 1 Invisible-island 1 Xterm 2023-07-27 9.3 HIGH N/A
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.
CVE-2006-7236 3 Debian, Invisible-island, Ubuntu 3 Debian Linux, Xterm, Linux 2018-10-03 9.3 HIGH N/A
The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences.