Gentoo Linux Security Advisory 201406-18 - A vulnerability in rxvt-unicode may allow a remote attacker to execute arbitrary code. Versions less than 9.20 are affected.
265fd3c25d7c4ae3e599687c6a81d3c09bfb1e5777f345264551bcebcc0ff312
Mandriva Linux Security Advisory 2014-094 - rxvt-unicode before 9.20 is vulnerable to a user-assisted arbitrary commands execution issue. This can be exploited by the unprocessed display of certain escape sequences in a crafted text file or program output. Arbitrary command sequences can be constructed using this, and unintentionally executed if used in conjunction with various other escape sequences.
3ab5b4ea6dca904ee4bbf52975e6d8a34be2beacaff2afa7fd590b36b72824b3
Debian Linux Security Advisory 2925-1 - Phillip Hallam-Baker discovered that window property values could be queried in rxvt-unicode, resulting in the potential execution of arbitrary commands.
e147a9a3c73f73ff8f86e3fb55e725719b80cc3ccde7c5d170dfe92148972078