CVE-2006-7236
xterm - remote code execution
EPSS 9.2%
Description
The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences.
How to fix CVE-2006-7236
To remediate CVE-2006-7236, upgrade the affected package to a fixed version below.
- Debian/xterm—upgrade to 238-1 or later
- Debian/xterm—upgrade to 235-2 or later
Is CVE-2006-7236 being exploited?
Moderate — EPSS is 9.2%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (2)
- from 0, < 238-1
- from 0, < 235-2