← Database

CVE-2006-7236

CRITICAL CVSS: 9.3 Published: 2009-01-02 Modified: 2026-06-16

Description

The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences.

Affected Platforms

Ubuntu LinuxDebian Debian LinuxInvisible-Island Xterm

Weakness Type

CWE-16

References