David Leadbeater personal blog

"<ESC>[31M"? ANSI Terminal security in 2023 and finding 10 CVEs

This paper reflects work done in late 2022 and 2023 to audit for vulnerabilities in terminal emulators, with a focus on open source software. The results of this work were 10 CVEs against terminal emulators that could result in Remote Code Execution (RCE), in addition various other bugs and hardening opportunities…
Points
278
HN comments
162
Submissions
1
Cited by
4 commenters

Security & PrivacySystems & Performance2023

On Hacker News

SubmittedTitle on HNPointsComments
Oct 20, 2023"<ESC>[31M"? ANSI Terminal security in 2023 and finding 10 CVEs by patrakov278162

Cited in comments

Linked from 5 Hacker News comments by 4 different people, from Nov 2023 to Apr 2026.

Most recent:

Search every comment that links here →

More from David Leadbeater

All 6 posts →

Related posts from the same era