Some vulnerabilities have been reported in GNU Screen, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

The vulnerabilities are caused due to errors within the handling of certain UTF-8 characters. This can be exploited to crash GNU Screen or potentially execute arbitrary code by printing a specially crafted string to the window.

The vulnerability is reported in versions prior to 4.0.3.

Solution
Update to version 4.0.3.

Provided and/or discovered by
The vendor credits cstone and Rich Felker

Original Advisory
http://lists.gnu.org/archive/html/screen-users/2006-10/msg00028.html

Deep Links
Links available in Customer Area