Unscored CVE-2023-39150 EUVD-2023-42891

ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code execu…

Published Sep 12, 2023 · Updated Sep 26, 2024 · Assigned by mitre

Description

ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code execution. This is related to an incomplete fix for CVE-2022-46387.

References

https://github.com/Maximus5/ConEmu/commit/60683a186628ffaa7689fcb64b3c38ced69287c1
https://gist.github.com/dgl/081cf503dc635df39d844e058a6d4c88