The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remote authenticated users to cause a denial of service (CPU and memory consumption and crash) via a crafted file, as demonstrated by a file containing the string "\033[100000000000000000@".
Exploitability
AV:NAC:MAu:SImpact
C:NI:NA:P3.5/AV:N/AC:M/Au:S/C:N/I:N/A:P