PT-2012-3387
CVE-2012-1620
·
Published
2012-07-12
·
Updated
2017-08-29
Description by
CVSS 2.0
3.6
LowMetricsAV:L/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
slock version 0.9
Description
The issue arises from improper handling of the XRaiseWindow event when the screen is locked. This might allow physically proximate attackers to obtain sensitive information by pressing a button, which reveals the desktop and active windows.
Recommendations
For slock version 0.9, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾