The screen dump feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a users terminal, e.g. when the user views a file containing the malicious sequence.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Eterm | Michael_jennings | 0.8.10 (including) | 0.8.10 (including) |
Eterm | Michael_jennings | 0.9.1 (including) | 0.9.1 (including) |