PT-2014-2788

CVE-2013-4427

·

Published

2014-05-19

·

Updated

2014-05-19

Description by

CVSS 2.0
2.1
Low
MetricsAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions pyxtrlock versions prior to 0.2
Description The issue arises from improper checking of return values of the xcb grab pointer and xcb grab keyboard XCB library functions. This allows physically proximate attackers to gain access to the keyboard or mouse without unlocking the screen.
Recommendations For pyxtrlock versions prior to 0.2, update to version 0.2 or later to resolve the issue. As a temporary workaround, consider restricting physical access to devices running the affected software until the update can be applied.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾