Lucene search
PRIOn knowledge basePRION:CVE-2010-2713HistoryAug 05, 2010 - 6:17 p.m.
Design/Logic Flaw
2010-08-0518:17:00
PRIOn knowledge base
www.prio-n.com
4
The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a (1) window title or (2) icon title sequence. NOTE: this issue exists because of a CVE-2003-0070 regression.
References
git.gnome.org/browse/vte/commit/?id=8b971a7b2c59902914ecbbc3915c45dd21530a91
lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
secunia.com/advisories/40635
www.securityfocus.com/bid/41716
www.ubuntu.com/usn/usn-962-1
www.vupen.com/english/advisories/2010/1839
bugzilla.redhat.com/show_bug.cgi?id=613110
Related
ubuntucve
ubuntucve
CVE-2010-2713
2010-07-16 00:00:00
debiancve
debiancve
CVE-2010-2713
2010-08-05 18:17:57
CVE-2003-0070
2004-09-01 04:00:00
nessus
nessus
Mandriva Linux Security Advisory : vte (MDVSA-2010:161)
2010-08-25 00:00:00
Ubuntu 9.04 / 9.10 / 10.04 LTS : vte vulnerability (USN-962-1)
2010-07-16 00:00:00
openSUSE Security Update : vte (openSUSE-SU-2010:0404-1)
2014-06-13 00:00:00
cve
cve
CVE-2010-2713
2010-08-05 18:17:57
CVE-2003-0070
2004-09-01 04:00:00
openvas
openvas
Mandriva Update for vte MDVSA-2010:161 (vte)
2010-08-30 00:00:00
Mandriva Update for vte MDVSA-2010:161 (vte)
2010-08-30 00:00:00
Ubuntu Update for vte vulnerability USN-962-1
2010-07-16 00:00:00
nvd
nvd
CVE-2010-2713
2010-08-05 18:17:57
CVE-2003-0070
2003-03-03 05:00:00
cvelist
cvelist
CVE-2010-2713
2010-08-05 18:00:00
CVE-2003-0070
2004-09-01 04:00:00
cert
cert
securityvulns
securityvulns
VTE control characters vulnerability
2010-07-16 00:00:00
[USN-962-1] VTE vulnerability
2010-07-16 00:00:00
Terminal Emulator Security Issues
2003-02-25 00:00:00
freebsd
freebsd
vte -- Classic terminal title set+query attack
2010-07-15 00:00:00
ubuntu
ubuntu
VTE vulnerability
2010-07-15 00:00:00
gentoo
gentoo
Multiple packages, Multiple vulnerabilities fixed in 2012
2014-12-11 00:00:00