← Database

CVE-2008-2383

CRITICAL CVSS: 9.3 Published: 2009-01-02 Modified: 2026-06-16

Description

CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.

Affected Platforms

Invisible-Island Xterm

Weakness Type

CWE-94

References