Ubuntu Security Notice 962-1 – Janne Snabb discovered that applications using VTE, such as gnome-terminal, did not correctly filter window and icon title request escape codes. If a user were tricked into viewing specially crafted output in their terminal, a remote attacker could execute arbitrary commands with user privileges.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/91882/USN-962-1.txt
Source: https://packetstormsecurity.com/files/91882/Ubuntu-Security-Notice-962-1.html