CVE-2024-38395

June 16, 2024, 1:15 a.m.

Tags

cve@mitre.org
2024-06-16
CVE-2024-38395

Product(s) Impacted

iTerm2

  • before 3.5.2

Description

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."

Weaknesses

Date

Published: June 16, 2024, 1:15 a.m.

Last Modified: June 16, 2024, 1:15 a.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References

https://gitlab.com/gnachman/iterm2/-/commit/f1e89f78dd72dcac3ba66d3d6f93db3f7f649219
cve@mitre.org
https://gitlab.com/gnachman/iterm2/-/tags/v3.5.2
cve@mitre.org
https://iterm2.com/downloads.html
cve@mitre.org
https://www.openwall.com/lists/oss-security/2024/06/15/1
cve@mitre.org