CVE-2010-2713
Gentoo Linux Security Advisory 201412-10
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a (1) window title or (2) icon title sequence. NOTE: this issue exists because of a CVE-2003-0070 regression.
La función vte_sequence_handler_window_manipulation en vteseq.c en libvte (conocido como libvte9) de VTE v0.25.1 y anteriores, tal como se utiliza en gnome-terminal, no gestiona adecuadamente las secuencias de escape, lo cual permite a atacantes remotos ejecutar comandos a su elección u obtener información potencialmente sensible a través de un (1) titulo de ventana o (2) icono de secuencia del título. NOTA: esta vulnerabilidad está provocada por una regresión del CVE-2003-0070.
This GLSA contains notification of vulnerabilities found in several Gentoo packages which have been fixed prior to January 1, 2013. The worst of these vulnerabilities could lead to local privilege escalation and remote code execution.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2010-07-13 CVE Reserved
- 2010-08-05 CVE Published
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/41716 | Vdb Entry | |
| https://bugzilla.redhat.com/show_bug.cgi?id=613110 | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| http://git.gnome.org/browse/vte/commit/?id=8b971a7b2c59902914ecbbc3915c45dd21530a91 | 2024-08-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html | 2010-09-09 | |
| http://secunia.com/advisories/40635 | 2010-09-09 | |
| http://www.ubuntu.com/usn/usn-962-1 | 2010-09-09 | |
| http://www.vupen.com/english/advisories/2010/1839 | 2010-09-09 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Nalin Dahyabhai Search vendor "Nalin Dahyabhai" | Vte Search vendor "Nalin Dahyabhai" for product "Vte" | <= 0.25.1 Search vendor "Nalin Dahyabhai" for product "Vte" and version " <= 0.25.1" | - |
Affected
| in | Gnome Search vendor "Gnome" | Gnome-terminal Search vendor "Gnome" for product "Gnome-terminal" | * | - |
Safe
|
| Nalin Dahyabhai Search vendor "Nalin Dahyabhai" | Vte Search vendor "Nalin Dahyabhai" for product "Vte" | 0.11.21 Search vendor "Nalin Dahyabhai" for product "Vte" and version "0.11.21" | - |
Affected
| in | Gnome Search vendor "Gnome" | Gnome-terminal Search vendor "Gnome" for product "Gnome-terminal" | * | - |
Safe
|
| Nalin Dahyabhai Search vendor "Nalin Dahyabhai" | Vte Search vendor "Nalin Dahyabhai" for product "Vte" | 0.12.2 Search vendor "Nalin Dahyabhai" for product "Vte" and version "0.12.2" | - |
Affected
| in | Gnome Search vendor "Gnome" | Gnome-terminal Search vendor "Gnome" for product "Gnome-terminal" | * | - |
Safe
|
| Nalin Dahyabhai Search vendor "Nalin Dahyabhai" | Vte Search vendor "Nalin Dahyabhai" for product "Vte" | 0.14.2 Search vendor "Nalin Dahyabhai" for product "Vte" and version "0.14.2" | - |
Affected
| in | Gnome Search vendor "Gnome" | Gnome-terminal Search vendor "Gnome" for product "Gnome-terminal" | * | - |
Safe
|
| Nalin Dahyabhai Search vendor "Nalin Dahyabhai" | Vte Search vendor "Nalin Dahyabhai" for product "Vte" | 0.15.0 Search vendor "Nalin Dahyabhai" for product "Vte" and version "0.15.0" | - |
Affected
| in | Gnome Search vendor "Gnome" | Gnome-terminal Search vendor "Gnome" for product "Gnome-terminal" | * | - |
Safe
|
| Nalin Dahyabhai Search vendor "Nalin Dahyabhai" | Vte Search vendor "Nalin Dahyabhai" for product "Vte" | 0.16.14 Search vendor "Nalin Dahyabhai" for product "Vte" and version "0.16.14" | - |
Affected
| in | Gnome Search vendor "Gnome" | Gnome-terminal Search vendor "Gnome" for product "Gnome-terminal" | * | - |
Safe
|
| Nalin Dahyabhai Search vendor "Nalin Dahyabhai" | Vte Search vendor "Nalin Dahyabhai" for product "Vte" | 0.17.4 Search vendor "Nalin Dahyabhai" for product "Vte" and version "0.17.4" | - |
Affected
| in | Gnome Search vendor "Gnome" | Gnome-terminal Search vendor "Gnome" for product "Gnome-terminal" | * | - |
Safe
|
| Nalin Dahyabhai Search vendor "Nalin Dahyabhai" | Vte Search vendor "Nalin Dahyabhai" for product "Vte" | 0.20.5 Search vendor "Nalin Dahyabhai" for product "Vte" and version "0.20.5" | - |
Affected
| in | Gnome Search vendor "Gnome" | Gnome-terminal Search vendor "Gnome" for product "Gnome-terminal" | * | - |
Safe
|
| Nalin Dahyabhai Search vendor "Nalin Dahyabhai" | Vte Search vendor "Nalin Dahyabhai" for product "Vte" | 0.22.5 Search vendor "Nalin Dahyabhai" for product "Vte" and version "0.22.5" | - |
Affected
| in | Gnome Search vendor "Gnome" | Gnome-terminal Search vendor "Gnome" for product "Gnome-terminal" | * | - |
Safe
|
| Nalin Dahyabhai Search vendor "Nalin Dahyabhai" | Vte Search vendor "Nalin Dahyabhai" for product "Vte" | 0.24.3 Search vendor "Nalin Dahyabhai" for product "Vte" and version "0.24.3" | - |
Affected
| in | Gnome Search vendor "Gnome" | Gnome-terminal Search vendor "Gnome" for product "Gnome-terminal" | * | - |
Safe
|