Skip to content
OpenAdvisories
Unscored DTSA-182-1 2 CVEs

xterm - remote code execution

Published Jan 5, 2009 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 xterm 235-2

Vulnerabilities 2

  • Unscored —
    CVE-2006-7236 Public exploit

    The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, whi…

  • Unscored —

    CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) char…