CVE-2003-0077

CVE-2003-0077 describes a vulnerability in the hanterm (hanterm-xf) terminal emulator, versions 2.0.5 and earlier. Attackers can exploit this by injecting a malicious character escape sequence into a file, which, when viewed by a user, modifies the terminal's window title and then inserts it back into the command line. This allows for the execution of arbitrary commands on the user's system. The vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. Its EPSS score is low, suggesting a low probability of exploitation. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal, indicating a lack of widespread attention.