CVE-2007-3770 The terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as de...
HighCVSS 7.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| os-cillation xfce terminal | = 0.2.6 | No fix listed |
| debian/xfce4-terminal(Debian:12) | < 0.2.6-3 | 0.2.6-3 |
| debian/xfce4-terminal(Debian:13) | < 0.2.6-3 | 0.2.6-3 |
| debian/xfce4-terminal(Debian:14) | < 0.2.6-3 | 0.2.6-3 |
References
- bugs.gentoo.org
- 38082 vdb-entry
- 26037 third-party-advisory vendor-advisory
- 26392 third-party-advisory
- 26418 third-party-advisory
- 27374 third-party-advisory
- GLSA-200708-07 vendor-advisory
- DSA-1393 vendor-advisory
- 24889 vdb-entry
- USN-497-1 vendor-advisory
- xfce-terminalhelper-command-execution(35379) vdb-entry
- Debian Security Tracker CVE-2007-3770 vendor-advisory
- bugs.debian.org issue-tracking