CVE:CVE-2010-2713
CNNVD:CNNVD-201008-045
在gnome-terminal中使用的VTE 0.25.1和之前的版本的libvte(又名libvte9)中的vteseq.c中的vte_sequence_handler_window_manipulation函数存在漏洞。不能正确处理转义序列，远程攻击者可以借助(1)window标题或(2)icon标题序列执行任意命令或获取潜在敏感信息。
solution:Upgrade nalin_dahyabhai vte to a higher version than 0.25.1,0.11.21,0.12.2,0.14.2,0.15.0,0.16.14,0.17.4,0.20.5,0.22.5,0.24.3,and avoid the version (,0.25.1],0.11.21,0.12.2,0.14.2,0.15.0,0.16.14,0.17.4,0.20.5,0.22.5,0.24.3