The screen dump feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user’s terminal, e.g. when the user views a file containing the malicious sequence.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Eterm | Michael_jennings | 0.8.10 | 0.8.10 |
Eterm | Michael_jennings | 0.9.1 | 0.9.1 |