CVE

Id
86248  
CVE No.
CVE-2015-8971  
Status
Candidate  
Description
Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063.  
Phase
Assigned (20161107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
758150 86248 CVE-2015-8971 MLIST:[oss-security] 20161104 CVE request: Escape Sequence Command Execution vulnerability in Terminology 0.7  View
758151 86248 CVE-2015-8971 URL:http://www.openwall.com/lists/oss-security/2016/11/04/12  View
758152 86248 CVE-2015-8971 MLIST:[oss-security] 20161104 Re: CVE request: Escape Sequence Command Execution vulnerability in Terminology 0.7  View
758153 86248 CVE-2015-8971 URL:http://www.openwall.com/lists/oss-security/2016/11/04/15  View
758154 86248 CVE-2015-8971 MLIST:[oss-security] 20161107 Re: CVE request: Escape Sequence Command Execution vulnerability in Terminology 0.7  View
758155 86248 CVE-2015-8971 URL:http://www.openwall.com/lists/oss-security/2016/11/07/1  View
758156 86248 CVE-2015-8971 CONFIRM:https://git.enlightenment.org/apps/terminology.git/commit/?id=b80bedc7c21ecffe99d8d142930db696eebdd6a5  View
758157 86248 CVE-2015-8971 DEBIAN:DSA-3712  View
758158 86248 CVE-2015-8971 URL:http://www.debian.org/security/2016/dsa-3712  View
758159 86248 CVE-2015-8971 BID:94132  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
624 JVNDB-2016-001397 複数の Microsoft Windows 製品の Sync Framework におけるサービス運用妨害 (DoS) の脆弱性 Microsoft Windows 8.1、Windows Server 2012 R2、および Windows RT 8.1 の Sync Framework には、サービス運用妨害 (SyncShareSvc サービス停止) 状態にされる脆弱性が存在します。 CVE-2016-0044 86248 5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001397.html  View