VULNERABILITY INTELLIGENCE
CVE-2008-2383
CVSS score9.3 HIGH
EPSS probability4.93%
CISA KEVNot currently listed
Published2009-01-02
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')