CVE-2003-0023: Rxvt

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

The menuBar feature in rxvt 2.7.8 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the menu.

Affected products

• Rxvt Rxvt: version 2.6.1 only; version 2.6.2 only; version 2.6.3 only; version 2.6.4 only; version 2.7.5 only; version 2.7.6 only; …

Published 2003-03-03. Last modified 2026-06-16.