{"id":22870,"date":"2022-01-10T08:26:45","date_gmt":"2022-01-10T07:26:45","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=22870"},"modified":"2022-01-10T10:14:50","modified_gmt":"2022-01-10T09:14:50","slug":"windows-terminal-emulator-titelnderung-fhrt-zu-white-screen-of-death","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2022\/01\/10\/windows-terminal-emulator-titelnderung-fhrt-zu-white-screen-of-death\/","title":{"rendered":"Windows Terminal Emulator: DoS and "White Screen of Death" via Escape Characters to Change the Title"},"content":{"rendered":"

\"Sicherheit[German<\/a>]Windows offers the possibility to change the window title of windows of a terminal emulator via control characters (ANSI Escape Characters). Some blog readers still know this, was used to adjust colors of a DOS window for example. A security researcher has shown that something like DoS attacks are also possible with it, which allow a white window (\"White Screen of Death\") or even a crash of the system via vulnerabilities in the applications. This is especially a problem in environments (Kubernetes) where terminal emulators are used and the window or the whole Windows machine can be crashed.<\/p>\n

<\/p>\n

\"\"I came across the issue via the following tweet from colleagues at Bleeping Computer, which is described by Eviatar Gerz (CyberArk) in the article Don't Trust This Title: Abusing Terminal Emulators with ANSI Escape Characters<\/a>.  <\/p>\n

\"Terminal<\/a><\/p>\n

Working with OpenShift (RedHat's Kubernetes distribution), Eviatar Gerz found that he could inject ANSI escape characters (see the following image) into web application components. <\/p>\n

\"ANSI
ANSI Escape Characters, Source: CyberArc<\/p>\n

The ANSI escape characters are then executed by the components – in the current case, the security researcher used this to change the color of the terminal window used. The question arose as to whether this could be abused for security purposes. Because there is an interesting Advisory von Digital Defense Incorporated<\/a> from 2003 about security issues with terminal emulators. <\/p>\n

Terminal emulators vulnerable<\/h2>\n

After investigating the issue, Eviatar Gerz found that many terminal emulators under Windows could be attacked and crashed via ANSI escape characters. At the end of the day, the following findings were available:<\/p>\n