CyberRota Analysis
AI-GeneratedThe vulnerability allows local attackers to exploit the procs tool by injecting malicious ANSI or OSC escape sequences into process command lines, which are then displayed unmodified in the Command column of other users' terminals. This could lead to unauthorized command execution or terminal manipulation, posing a risk to user environments. Organizations using procs versions up to 0.14.12 should prioritize patching to mitigate potential local attack vectors.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals for interpretation by terminal emulators.