CVE-2012-0064

2014-02-1023:55:00

CWE-264

[email protected]

web.nvd.nist.gov

xkeyboard-config

x.org

cve-2012-0064

security

input grab

6.2 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

60.5%

JSON

xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab.

CPENameOperatorVersion
x:x.org_x11x x.org x11eq7.1
xkeyboard_config_project:xkeyboard-configxkeyboard config project xkeyboard-configeq2.0
x:x.org_x11x x.org x11eq1.0
xkeyboard_config_project:xkeyboard-configxkeyboard config project xkeyboard-configeq2.2
x:x.org_x11x x.org x11eq4.0
xkeyboard_config_project:xkeyboard-configxkeyboard config project xkeyboard-configeq2.1
x:x.org_x11x x.org x11eq7.2
x:x.org_x11x x.org x11eq7.3
x:x.org_x11x x.org x11eq6.4
x:x.org_x11x x.org x11eq6.6

CPE	Name	Operator	Version
x:x.org_x11	x x.org x11	eq	7.1
xkeyboard_config_project:xkeyboard-config	xkeyboard config project xkeyboard-config	eq	2.0
x:x.org_x11	x x.org x11	eq	1.0
xkeyboard_config_project:xkeyboard-config	xkeyboard config project xkeyboard-config	eq	2.2
x:x.org_x11	x x.org x11	eq	4.0
xkeyboard_config_project:xkeyboard-config	xkeyboard config project xkeyboard-config	eq	2.1
x:x.org_x11	x x.org x11	eq	7.2
x:x.org_x11	x x.org x11	eq	7.3
x:x.org_x11	x x.org x11	eq	6.4
x:x.org_x11	x x.org x11	eq	6.6