critical9.8
CVE-2023-46300
iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to tmux integration.
Impact
iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to tmux integration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iterm2 | Iterm2 | before 3.4.20 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.solidsnail.com/posts/2023-08-28-iterm2-rce
- https://github.com/gnachman/iTerm2/commit/ae8192522661c34d1cbe57f6f9ef2ff0a337c2a5
- https://github.com/gnachman/iTerm2/commit/b2268b03b5f3d4cd8ca275eaef5d16d0fac20009
- https://iterm2.com/news.html
- https://blog.solidsnail.com/posts/2023-08-28-iterm2-rce
- https://github.com/gnachman/iTerm2/commit/ae8192522661c34d1cbe57f6f9ef2ff0a337c2a5
- https://github.com/gnachman/iTerm2/commit/b2268b03b5f3d4cd8ca275eaef5d16d0fac20009
- https://iterm2.com/news.html