Vulnerability Report

CVE-2010-2713

RCE

Title: Gnome Gnome-Terminal RCE

RCE

Proof Of Concept

No public PoC currently indexed for CVE-2010-2713.

CWE Category NVD-CWE-noinfo
Published Date Aug 05, 2010
Modified Date Jun 16, 2026
Exploit Status Not Found
Score 6.8 CVSS v2.0
Exploit Probability (EPSS)
3.34%

Vulnerability Summary

CVE-2010-2713: The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a (1) window title or (2) icon title sequence. NOTE: this issue exists because of a CVE-2003-0070 regression.

Impacted Vendors

G
gnome 1
N
nalin_dahyabhai 1

Reference Links

http://git.gnome.org/browse/vte/commit/?id=8b971a7b2c59902914ecbbc3915c45dd21530a91 http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html http://secunia.com/advisories/40635 http://www.securityfocus.com/bid/41716 http://www.ubuntu.com/usn/usn-962-1 http://www.vupen.com/english/advisories/2010/1839 https://bugzilla.redhat.com/show_bug.cgi?id=613110 http://git.gnome.org/browse/vte/commit/?id=8b971a7b2c59902914ecbbc3915c45dd21530a91 http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html http://secunia.com/advisories/40635 http://www.securityfocus.com/bid/41716 http://www.ubuntu.com/usn/usn-962-1 http://www.vupen.com/english/advisories/2010/1839 https://bugzilla.redhat.com/show_bug.cgi?id=613110
CVSS v2.0
Source Entity [email protected]
Severity MEDIUM
6.8
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:M/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2010-2713 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.