PT-2014-2788
CVE-2013-4427
·
تاريخ النشر
2014-05-19
·
تاريخ التحديث
2014-05-19
الوصف من
CVSS 2.0
2.1
منخفضةالمقاييسAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
pyxtrlock versions prior to 0.2
Description
The issue arises from improper checking of return values of the
xcb grab pointer and xcb grab keyboard XCB library functions. This allows physically proximate attackers to gain access to the keyboard or mouse without unlocking the screen.Recommendations
For pyxtrlock versions prior to 0.2, update to version 0.2 or later to resolve the issue. As a temporary workaround, consider restricting physical access to devices running the affected software until the update can be applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾