Package: screen
Severity: grave
Tags: security

From http://secunia.com/advisories/22583/:
"Some vulnerabilities have been reported in GNU Screen, which can be 
exploited by malicious people to cause a DoS (Denial of Service) or 
potentially compromise a vulnerable system.
 
 The vulnerabilities are caused due to errors within the handling of 
certain UTF-8 characters. This can be exploited to crash GNU Screen 
or potentially execute arbitrary code by printing a specially crafted 
string to the window."

This is fixed in 4.0.3

Please mention the CVE id in the changelog.

Reply via email to