Drag and Pwnd: Leverage ASCII characters to exploit VS Code

Key Points:

• Main threat/vulnerability: Exploitation of control characters (SOH, STX, EOT, ETX) in Visual Studio Code (VS Code) terminal emulators.
• Impact and affected systems: This vulnerability can lead to arbitrary code execution within VS Code, potentially compromising the development environment and sensitive data.
• Recommended actions: Users should update VS Code to the latest version, disable any untrusted extensions, and avoid executing code from unknown sources.

MITRE ATT&CK: Not applicable

IOCs: None mentioned