CVE

Id
45297  
CVE No.
CVE-2010-2713  
Status
Candidate  
Description
The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a (1) window title or (2) icon title sequence. NOTE: this issue exists because of a CVE-2003-0070 regression.  
Phase
Assigned (20100713)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
493583 45297 CVE-2010-2713 CONFIRM:http://git.gnome.org/browse/vte/commit/?id=8b971a7b2c59902914ecbbc3915c45dd21530a91  View
493584 45297 CVE-2010-2713 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=613110  View
493585 45297 CVE-2010-2713 SUSE:SUSE-SR:2010:014  View
493586 45297 CVE-2010-2713 URL:http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html  View
493587 45297 CVE-2010-2713 UBUNTU:USN-962-1  View
493588 45297 CVE-2010-2713 URL:http://www.ubuntu.com/usn/usn-962-1  View
493589 45297 CVE-2010-2713 BID:41716  View
493590 45297 CVE-2010-2713 URL:http://www.securityfocus.com/bid/41716  View
493591 45297 CVE-2010-2713 SECUNIA:40635  View
493592 45297 CVE-2010-2713 URL:http://secunia.com/advisories/40635  View
493593 45297 CVE-2010-2713 VUPEN:ADV-2010-1839  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38422 JVNDB-2010-004207 CruxSoftware CruxCMS の manager/login.php におけるクロスサイトスクリプティングの脆弱性 CruxSoftware CruxCMS の manager/login.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-2717 45297 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004207.html  View