Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-3121
HistoryMay 14, 2014 - 12:55 a.m.

CVE-2014-3121

2014-05-1400:55:10
CWE-78
[email protected]
web.nvd.nist.gov
33
rxvt-unicode
vulnerability
osc escape sequences
cve-2014-3121
nvd

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

87.1%

JSON

rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands.

Affected configurations

NVD
Node
marc_lehmannrxvt-unicodeRange≤9.19
OR
marc_lehmannrxvt-unicodeMatch9.0
OR
marc_lehmannrxvt-unicodeMatch9.01
OR
marc_lehmannrxvt-unicodeMatch9.02
OR
marc_lehmannrxvt-unicodeMatch9.05
OR
marc_lehmannrxvt-unicodeMatch9.06
OR
marc_lehmannrxvt-unicodeMatch9.07
OR
marc_lehmannrxvt-unicodeMatch9.08
OR
marc_lehmannrxvt-unicodeMatch9.09
OR
marc_lehmannrxvt-unicodeMatch9.10
OR
marc_lehmannrxvt-unicodeMatch9.11
OR
marc_lehmannrxvt-unicodeMatch9.12
OR
marc_lehmannrxvt-unicodeMatch9.14
OR
marc_lehmannrxvt-unicodeMatch9.15
OR
marc_lehmannrxvt-unicodeMatch9.16
OR
marc_lehmannrxvt-unicodeMatch9.17
OR
marc_lehmannrxvt-unicodeMatch9.18

Related

debian 1
mageia 1
prion 1
openvas 7
nessus 7
gentoo 1
fedora 2
ubuntucve 1
osv 1
suse 1
nvd 1
debiancve 1
securityvulns 2
cvelist 1
debian
debian
[SECURITY] [DSA 2925-1] rxvt-unicode security update
2014-05-08 16:15:36
mageia
mageia
Updated rxvt-unicode packages fix CVE-2014-3121
2014-05-02 22:05:53
prion
prion
Command injection
2014-05-14 00:55:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0202)
2022-01-28 00:00:00
Fedora Update for rxvt-unicode FEDORA-2014-5939
2014-05-19 00:00:00
Debian Security Advisory DSA 2925-1 (rxvt-unicode - security update)
2014-05-08 00:00:00
nessus
nessus
openSUSE Security Update : rxvt-unicode (openSUSE-SU-2014:0814-1)
2014-06-19 00:00:00
Fedora 20 : rxvt-unicode-9.20-1.fc20 (2014-5939)
2014-05-12 00:00:00
Debian DSA-2925-1 : rxvt-unicode - security update
2014-05-09 00:00:00
gentoo
gentoo
rxvt-unicode: User-assisted execution of arbitrary code
2014-06-19 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: rxvt-unicode-9.20-1.fc20
2014-05-12 05:26:44
[SECURITY] Fedora 19 Update: rxvt-unicode-9.20-1.fc19
2014-05-12 05:22:00
ubuntucve
ubuntucve
CVE-2014-3121
2014-05-14 00:00:00
osv
osv
rxvt-unicode - security update
2014-05-08 00:00:00
suse
suse
Security update for rxvt-unicode (important)
2014-06-24 23:04:16
nvd
nvd
CVE-2014-3121
2014-05-14 00:55:10
debiancve
debiancve
CVE-2014-3121
2014-05-14 00:55:10
securityvulns
securityvulns
[SECURITY] [DSA 2925-1] rxvt-unicode security update
2014-05-10 00:00:00
rxvt-unicode code execution
2014-05-10 00:00:00
cvelist
cvelist
CVE-2014-3121
2014-05-14 00:00:00

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

87.1%

JSON
Related for CVE-2014-3121
debian1mageia1prion1openvas7nessus7gentoo1fedora2ubuntucve1osv1suse1nvd1debiancve1securityvulns2cvelist1