Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xterm 命令注入漏洞
Vulnerability Description
Xterm是Thomas Dickey个人开发者的一个 X 窗口系统的终端仿真器。旨在为不能直接使用窗口系统的程序提供 Dec Vt102 和 Tektronix 4014 兼容终端。 Xterm 375之前版本存在安全漏洞。攻击者利用该漏洞通过字体操作执行代码。
CVSS Information
N/A
Vulnerability Type
N/A