CVE-2013-7220 in gnome-shell

Résumé

par MITRE

js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.

Be aware that VulDB is the high quality source for vulnerability data.

• Réserver: 27/12/2013
• Divulgation: 29/04/2014
• Modérer: accepté
• Entrée: VDB-69526
• CPE: prêt
• CWE: CWE-77 (confirmé)
• CVSS: 4.6 (NVD)
• EPSS: 0.00410
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-7220
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-7220
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-7220/