What is CVE-2006-7236?

CVE-2006-7236 is a vulnerability in Invisible-island Xterm, classified under CWE-16. Published 2009-01-02.

Is CVE-2006-7236 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Invisible-island Xterm

CVE-2006-7236

The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences.

EPSS: 0.075 (93.8th percentile) — read the EPSS interpretation.

Affected products

Invisible-island Xterm — versions _nil_
Debian Debian_linux
Ubuntu Linux
N/a — versions n/a

Weakness classification (CWE)

CWE-16

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (x_refsource_UBUNTU, vendor-advisory)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2006-7236?: CVE-2006-7236 is a vulnerability in Invisible-island Xterm, classified under CWE-16. Published 2009-01-02.
Is CVE-2006-7236 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.