CVE-2014-3121
14.05.2014, 00:55
rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands.
| Vendor | Product | Version |
|---|---|---|
| marc_lehmann | rxvt-unicode | 𝑥 ≤ 9.19 |
| marc_lehmann | rxvt-unicode | 9.0 |
| marc_lehmann | rxvt-unicode | 9.01 |
| marc_lehmann | rxvt-unicode | 9.02 |
| marc_lehmann | rxvt-unicode | 9.05 |
| marc_lehmann | rxvt-unicode | 9.06 |
| marc_lehmann | rxvt-unicode | 9.07 |
| marc_lehmann | rxvt-unicode | 9.08 |
| marc_lehmann | rxvt-unicode | 9.09 |
| marc_lehmann | rxvt-unicode | 9.10 |
| marc_lehmann | rxvt-unicode | 9.11 |
| marc_lehmann | rxvt-unicode | 9.12 |
| marc_lehmann | rxvt-unicode | 9.14 |
| marc_lehmann | rxvt-unicode | 9.15 |
| marc_lehmann | rxvt-unicode | 9.16 |
| marc_lehmann | rxvt-unicode | 9.17 |
| marc_lehmann | rxvt-unicode | 9.18 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References