Nalin Dahyabhai VTE 0.22.5
Approved changes feed: RSS · Atom
cpe:2.3:a:nalin_dahyabhai:vte:0.22.5:*:*:*:*:*:*:*part: a version: 0.22.5 update: *
| Vendor | Nalin Dahyabhai (55ea94f8-dfaa-58ae-b106-20c444c84fcb) |
|---|---|
| Product | Vte (5bf542a2-e3db-56d4-9bbc-a2a2b447cc95) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/vte |
purl2cpe | 2026-06-01 10:12:35.911340 |
pkg:deb/ubuntu/vte |
purl2cpe | 2026-06-01 10:12:35.911342 |
pkg:github/gnome/vte |
purl2cpe | 2026-06-01 10:12:35.911344 |
pkg:rpm/fedora/vte |
purl2cpe | 2026-06-01 10:12:35.911346 |
pkg:rpm/opensuse/vte |
purl2cpe | 2026-06-01 10:12:35.911348 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-2738 |
vulnerable | 2026-06-08 05:02:06.002236 |
Details available
The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.
Published: 2012-07-22T16:00:00.000Z
Updated: 2024-08-06T19:42:32.368Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2713 |
vulnerable | 2026-06-08 04:55:09.788158 |
Details available
The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a (1) window title or (2) icon title sequence. NOTE: this issue exists because of a CVE-2003-0070 regression.
Published: 2010-08-05T18:00:00.000Z
Updated: 2024-08-07T02:39:38.067Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0070 |
vulnerable | 2026-06-08 04:47:20.414088 |
Details available
VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T01:43:35.095Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.