CVE-2008-2383

HIGH · CVSS 9.3 EPSS 4.97%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-01-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2008-2383

Severity

HIGH

CVSS

9.3

EPSS

4.97%

Original NVD Description

CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.