PT-2014-2788
CVE-2013-4427
·
Publicado
2014-05-19
·
Atualizado
2014-05-19
Descrição por
CVSS 2.0
2.1
BaixaMétricasAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
pyxtrlock versions prior to 0.2
Description
The issue arises from improper checking of return values of the
xcb grab pointer and xcb grab keyboard XCB library functions. This allows physically proximate attackers to gain access to the keyboard or mouse without unlocking the screen.Recommendations
For pyxtrlock versions prior to 0.2, update to version 0.2 or later to resolve the issue. As a temporary workaround, consider restricting physical access to devices running the affected software until the update can be applied.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾