CVE-2008-1142
No CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days.
rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- aterm:aterm
- eterm:eterm
- mrxvt:mrxvt
- multi-aterm:multi-aterm
- rxvt-unicode:rxvt-unicode
- rxvt:rxvt
- wterm:wterm