vulnerability

Ubuntu: (CVE-2015-8971): terminology vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:P/I:P/A:P)

Published

Jan 23, 2017

Added

Nov 19, 2024

Modified

Apr 16, 2026

Description

Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063.

Solution

ubuntu-upgrade-terminology

References

CVE-2015-8971
https://attackerkb.com/topics/CVE-2015-8971
CWE-77
DEBIAN-DSA-3712
EUVD-EUVD-2015-8825
http://www.openwall.com/lists/oss-security/2016/11/04/12
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-8825
https://www.cve.org/CVERecord?id=CVE-2015-8971

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report