David Leadbeater: 60 Years of Terminal Vulnerabilities
A DEF CON 31 talk on the security of terminal emulators and escape sequences dating back to the ASCII standard of the 1960s. These mechanisms are still widely used in modern operating systems.
The researcher revisits this class of legacy vulnerabilities and uncovers new issues in several popular terminals. In some cases, they can lead to remote code execution, especially when combined with other bugs.
The talk highlights that even basic tools like terminals remain an important and often overlooked attack surface.
The researcher revisits this class of legacy vulnerabilities and uncovers new issues in several popular terminals. In some cases, they can lead to remote code execution, especially when combined with other bugs.
The talk highlights that even basic tools like terminals remain an important and often overlooked attack surface.