The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Advisories
Source ID Title
EUVD EUVD EUVD-2003-0063 The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-08T01:43:34.875Z

Reserved: 2003-02-04T00:00:00

Link: CVE-2003-0067

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2003-03-18T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2003-0067

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.