Editing Talk (software) (section)

==Security==
A popular program called "flash", which sent malformed information via the talk protocol, was frequently used by pranksters to corrupt the terminal output of the unlucky target in the early 1990s.{{citation needed|date=June 2012}} It did this by including terminal commands in the field normally designated for providing the name of the person making the request. When the victim would receive the talk request, the name of the person sending the request would be displayed on their screen. This would cause the terminal commands to execute, rendering the person's display unreadable until they reset it. Later versions of talk blocked flash attempts and alerted the user that one had taken place. Later it became clear that, by sending different terminal commands, it is even possible to have the user execute commands. As it has proven impossible to fix all programs that output untrusted data to the terminal, modern terminal emulators have been rewritten to block this attack, though some may still be vulnerable.<ref>{{Cite web |date=February 24, 2003 |title=Updated vte packages fix gnome-terminal vulnerability |url=http://rhn.redhat.com/errata/RHSA-2003-053.html |url-status=dead |archive-url=https://web.archive.org/web/20160304090803/http://rhn.redhat.com/errata/RHSA-2003-053.html |archive-date=March 4, 2016 |website=Red Hat Customer Portal |id=RHSA-2003:053-10, CVE-2003-0070, Red Hat Bugzilla 1616950}}</ref><ref>{{Cite web |last=Moore |first=H D |last2=Digital Defense |date=July 11, 2009 |orig-date=February 25, 2003 |title=Gnome-Terminal Window Title Reporting Escape Sequence Command Execution Vulnerability |url=https://www.securityfocus.com/bid/6948/info |url-status=dead |archive-url=https://web.archive.org/web/20210128224645/https://www.securityfocus.com/bid/6948/info |archive-date=January 28, 2021 |website=SecurityFocus |id=CVE-2003-0070 |quote=}}</ref>