Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-9535

A vulnerability exists in the way that iTerm2 integrates with tmux's control mode, which may allow an attacker to execute arbitrary commands by providing malicious output to the terminal. This affects versions of iTerm2 up to and including 3.3.5. This vulnerability may allow an attacker to execute arbitrary commands on their victim's computer by providing malicious output to the terminal. It could be exploited using command-line utilities that print attacker-controlled content.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 78.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
Products affected by CVE-2019-9535
  • Iterm2 » Iterm2 » Version: 1.0.0
    cpe:2.3:a:iterm2:iterm2:1.0.0
  • Iterm2 » Iterm2 » Version: 2.0
    cpe:2.3:a:iterm2:iterm2:2.0
  • Iterm2 » Iterm2 » Version: 2.1.1
    cpe:2.3:a:iterm2:iterm2:2.1.1
  • Iterm2 » Iterm2 » Version: 2.1.3
    cpe:2.3:a:iterm2:iterm2:2.1.3
  • Iterm2 » Iterm2 » Version: 2.1.4
    cpe:2.3:a:iterm2:iterm2:2.1.4
  • Iterm2 » Iterm2 » Version: 2.9.20151111
    cpe:2.3:a:iterm2:iterm2:2.9.20151111
  • Iterm2 » Iterm2 » Version: 2.9.20151229
    cpe:2.3:a:iterm2:iterm2:2.9.20151229
  • Iterm2 » Iterm2 » Version: 2.9.20160102
    cpe:2.3:a:iterm2:iterm2:2.9.20160102
  • Iterm2 » Iterm2 » Version: 2.9.20160113
    cpe:2.3:a:iterm2:iterm2:2.9.20160113
  • Iterm2 » Iterm2 » Version: 2.9.20160206
    cpe:2.3:a:iterm2:iterm2:2.9.20160206
  • Iterm2 » Iterm2 » Version: 2.9.20160313
    cpe:2.3:a:iterm2:iterm2:2.9.20160313
  • Iterm2 » Iterm2 » Version: 2.9.20160422
    cpe:2.3:a:iterm2:iterm2:2.9.20160422
  • Iterm2 » Iterm2 » Version: 2.9.20160426
    cpe:2.3:a:iterm2:iterm2:2.9.20160426
  • Iterm2 » Iterm2 » Version: 2.9.20160510
    cpe:2.3:a:iterm2:iterm2:2.9.20160510
  • Iterm2 » Iterm2 » Version: 2.9.20160523
    cpe:2.3:a:iterm2:iterm2:2.9.20160523
  • Iterm2 » Iterm2 » Version: 3.0.0
    cpe:2.3:a:iterm2:iterm2:3.0.0
  • Iterm2 » Iterm2 » Version: 3.0.1
    cpe:2.3:a:iterm2:iterm2:3.0.1
  • Iterm2 » Iterm2 » Version: 3.0.10
    cpe:2.3:a:iterm2:iterm2:3.0.10
  • Iterm2 » Iterm2 » Version: 3.0.11
    cpe:2.3:a:iterm2:iterm2:3.0.11
  • Iterm2 » Iterm2 » Version: 3.0.12
    cpe:2.3:a:iterm2:iterm2:3.0.12
  • Iterm2 » Iterm2 » Version: 3.0.13
    cpe:2.3:a:iterm2:iterm2:3.0.13
  • Iterm2 » Iterm2 » Version: 3.0.14
    cpe:2.3:a:iterm2:iterm2:3.0.14
  • Iterm2 » Iterm2 » Version: 3.0.15
    cpe:2.3:a:iterm2:iterm2:3.0.15
  • Iterm2 » Iterm2 » Version: 3.0.2
    cpe:2.3:a:iterm2:iterm2:3.0.2
  • Iterm2 » Iterm2 » Version: 3.0.20160531
    cpe:2.3:a:iterm2:iterm2:3.0.20160531
  • Iterm2 » Iterm2 » Version: 3.0.3
    cpe:2.3:a:iterm2:iterm2:3.0.3
  • Iterm2 » Iterm2 » Version: 3.0.4
    cpe:2.3:a:iterm2:iterm2:3.0.4
  • Iterm2 » Iterm2 » Version: 3.0.5
    cpe:2.3:a:iterm2:iterm2:3.0.5
  • Iterm2 » Iterm2 » Version: 3.0.6
    cpe:2.3:a:iterm2:iterm2:3.0.6
  • Iterm2 » Iterm2 » Version: 3.0.7
    cpe:2.3:a:iterm2:iterm2:3.0.7
  • Iterm2 » Iterm2 » Version: 3.0.8
    cpe:2.3:a:iterm2:iterm2:3.0.8
  • Iterm2 » Iterm2 » Version: 3.0.9
    cpe:2.3:a:iterm2:iterm2:3.0.9
  • Iterm2 » Iterm2 » Version: 3.1.0
    cpe:2.3:a:iterm2:iterm2:3.1.0
  • Iterm2 » Iterm2 » Version: 3.1.1
    cpe:2.3:a:iterm2:iterm2:3.1.1
  • Iterm2 » Iterm2 » Version: 3.1.2
    cpe:2.3:a:iterm2:iterm2:3.1.2
  • Iterm2 » Iterm2 » Version: 3.1.3
    cpe:2.3:a:iterm2:iterm2:3.1.3
  • Iterm2 » Iterm2 » Version: 3.1.4
    cpe:2.3:a:iterm2:iterm2:3.1.4
  • Iterm2 » Iterm2 » Version: 3.1.5
    cpe:2.3:a:iterm2:iterm2:3.1.5
  • Iterm2 » Iterm2 » Version: 3.1.6
    cpe:2.3:a:iterm2:iterm2:3.1.6
  • Iterm2 » Iterm2 » Version: 3.1.7
    cpe:2.3:a:iterm2:iterm2:3.1.7
  • Iterm2 » Iterm2 » Version: 3.2.0
    cpe:2.3:a:iterm2:iterm2:3.2.0
  • Iterm2 » Iterm2 » Version: 3.2.1
    cpe:2.3:a:iterm2:iterm2:3.2.1
  • Iterm2 » Iterm2 » Version: 3.2.2
    cpe:2.3:a:iterm2:iterm2:3.2.2
  • Iterm2 » Iterm2 » Version: 3.2.3
    cpe:2.3:a:iterm2:iterm2:3.2.3
  • Iterm2 » Iterm2 » Version: 3.2.4
    cpe:2.3:a:iterm2:iterm2:3.2.4
  • Iterm2 » Iterm2 » Version: 3.2.5
    cpe:2.3:a:iterm2:iterm2:3.2.5
  • Iterm2 » Iterm2 » Version: 3.2.6
    cpe:2.3:a:iterm2:iterm2:3.2.6
  • Iterm2 » Iterm2 » Version: 3.2.7
    cpe:2.3:a:iterm2:iterm2:3.2.7
  • Iterm2 » Iterm2 » Version: 3.2.8
    cpe:2.3:a:iterm2:iterm2:3.2.8
  • Iterm2 » Iterm2 » Version: 3.2.9
    cpe:2.3:a:iterm2:iterm2:3.2.9
  • Iterm2 » Iterm2 » Version: 3.3.0
    cpe:2.3:a:iterm2:iterm2:3.3.0
  • Iterm2 » Iterm2 » Version: 3.3.1
    cpe:2.3:a:iterm2:iterm2:3.3.1
  • Iterm2 » Iterm2 » Version: 3.3.2
    cpe:2.3:a:iterm2:iterm2:3.3.2
  • Iterm2 » Iterm2 » Version: 3.3.3
    cpe:2.3:a:iterm2:iterm2:3.3.3
  • Iterm2 » Iterm2 » Version: 3.3.4
    cpe:2.3:a:iterm2:iterm2:3.3.4
  • Iterm2 » Iterm2 » Version: 3.3.5
    cpe:2.3:a:iterm2:iterm2:3.3.5


Products
Pricing
Contact Us

Shodan ® - All rights reserved