CVE-2008-2383: Invisible-Island Xterm

High severity, CVSS 9.3. EPSS: 4.9% chance of exploitation in the next 30 days.

CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.

Affected products

• Invisible-Island Xterm: version _nil_ only

Published 2009-01-02. Last modified 2026-06-16.