Read the docs
TI-2010-02603 Aliases CVE-2010-2713GHSA-h3vh-54q4-255x

The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9)…

Priority LOW 36Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a (1) window title or (2) icon title sequence. NOTE: this issue exists because of a CVE-2003-0070 regression.

Why it matters now

EPSS 0.03343 88th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:a:nalin_dahyabhai:vte:*:*:*:*:*:*:*:*up to 0.25.1VulnerableNalin Dahyabhai
cpe:2.3:a:nalin_dahyabhai:vte:0.11.21:*:*:*:*:*:*:*0.11.21VulnerableNalin Dahyabhai
cpe:2.3:a:nalin_dahyabhai:vte:0.12.2:*:*:*:*:*:*:*0.12.2VulnerableNalin Dahyabhai
cpe:2.3:a:nalin_dahyabhai:vte:0.14.2:*:*:*:*:*:*:*0.14.2VulnerableNalin Dahyabhai
cpe:2.3:a:nalin_dahyabhai:vte:0.15.0:*:*:*:*:*:*:*0.15.0VulnerableNalin Dahyabhai
cpe:2.3:a:nalin_dahyabhai:vte:0.16.14:*:*:*:*:*:*:*0.16.14VulnerableNalin Dahyabhai
cpe:2.3:a:nalin_dahyabhai:vte:0.17.4:*:*:*:*:*:*:*0.17.4VulnerableNalin Dahyabhai
cpe:2.3:a:nalin_dahyabhai:vte:0.20.5:*:*:*:*:*:*:*0.20.5VulnerableNalin Dahyabhai
cpe:2.3:a:nalin_dahyabhai:vte:0.22.5:*:*:*:*:*:*:*0.22.5VulnerableNalin Dahyabhai
cpe:2.3:a:nalin_dahyabhai:vte:0.24.3:*:*:*:*:*:*:*0.24.3VulnerableNalin Dahyabhai
  • cpe:2.3:a:nalin_dahyabhai:vte:*:*:*:*:*:*:*:* Versions up to 0.25.1 Vulnerable ·Nalin Dahyabhai
  • cpe:2.3:a:nalin_dahyabhai:vte:0.11.21:*:*:*:*:*:*:* Versions 0.11.21 Vulnerable ·Nalin Dahyabhai
  • cpe:2.3:a:nalin_dahyabhai:vte:0.12.2:*:*:*:*:*:*:* Versions 0.12.2 Vulnerable ·Nalin Dahyabhai
  • cpe:2.3:a:nalin_dahyabhai:vte:0.14.2:*:*:*:*:*:*:* Versions 0.14.2 Vulnerable ·Nalin Dahyabhai
  • cpe:2.3:a:nalin_dahyabhai:vte:0.15.0:*:*:*:*:*:*:* Versions 0.15.0 Vulnerable ·Nalin Dahyabhai
  • cpe:2.3:a:nalin_dahyabhai:vte:0.16.14:*:*:*:*:*:*:* Versions 0.16.14 Vulnerable ·Nalin Dahyabhai
  • cpe:2.3:a:nalin_dahyabhai:vte:0.17.4:*:*:*:*:*:*:* Versions 0.17.4 Vulnerable ·Nalin Dahyabhai
  • cpe:2.3:a:nalin_dahyabhai:vte:0.20.5:*:*:*:*:*:*:* Versions 0.20.5 Vulnerable ·Nalin Dahyabhai
  • cpe:2.3:a:nalin_dahyabhai:vte:0.22.5:*:*:*:*:*:*:* Versions 0.22.5 Vulnerable ·Nalin Dahyabhai
  • cpe:2.3:a:nalin_dahyabhai:vte:0.24.3:*:*:*:*:*:*:* Versions 0.24.3 Vulnerable ·Nalin Dahyabhai
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:gnome:gnome-terminal:*:*:*:*:*:*:*:*all versionsRunning onGNOME
  • cpe:2.3:a:gnome:gnome-terminal:*:*:*:*:*:*:*:* Versions all versions Running on ·GNOME

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat Enterprise Linux 6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-2713
  2. 2026-10-03 Alias added: GHSA-h3vh-54q4-255x

References

Exploit 1

Advisory 3

Other 1

  • TI-2003-00066 VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in… CVSS 2.0MEDIUM 6.8
  • TI-2012-02369 The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users… CVSS 2.0MEDIUM 4.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences