Vulnerability in xterm leading to code execution through specific strings processing
A vulnerability (CVE-2022-45063) has been identified in the xterm terminal emulator, allowing for the execution of shell commands when processing certain escape sequences in the terminal. In a simple attack, it is sufficient to display the contents of a specially formatted file on the screen, for example, using the cat utility, or to paste a line from the clipboard. printf "\e]50;i\$(touch /tmp/hack-like-its-1999)\a\e]50;?\a" > cve-2022-45063 cat cve-2022-45063 The issue was caused by an error in handling the escape sequence with […]
