CVE-2013-2190 in GNOME

Summary

The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous gnome-shell session via unspecified vectors.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 02/19/2013
• Disclosure: 10/17/2013
• Moderation: VulDB entry created
• Entries: 1: VDB-9245
• CPE: ready
• CWE: CWE-264 (Confirmed)
• CVSS: 5.1
• EPSS: 0.00078
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-2190
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-2190
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-2190/