Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2019-0542

A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js.

VectorNETWORK

PublishedJan 09, 2019, 15:29

Published Bysecure@microsoft.com

Base Score

Score8.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

xterm(npm)03.8.1N/A

xterm(npm)3.9.03.9.2N/A

xterm(npm)3.10.03.10.1N/A

References

http://www.securityfocus.com/bid/106434
https://access.redhat.com/errata/RHBA-2019:0959
https://access.redhat.com/errata/RHSA-2019:1422
https://access.redhat.com/errata/RHSA-2019:2551
https://access.redhat.com/errata/RHSA-2019:2552
https://github.com/xtermjs/xterm.js/releases

Weakness Type

CWE-94

CVSS Metrics

Base Score

8.8

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK