Lucene search

K
cveRedhatCVE-2013-4427
HistoryMay 19, 2014 - 2:55 p.m.

CVE-2013-4427

2014-05-1914:55:07
CWE-20
redhat
web.nvd.nist.gov
15
pyxtrlock
cve-2013-4427
xcb library
keyboard security
mouse security
physical access

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

20.0%

pyxtrlock before 0.2 does not properly check the return values of the (1) xcb_grab_pointer and (2) xcb_grab_keyboard XCB library functions, which allows physically proximate attackers to gain access to the keyboard or mouse without unlocking the screen via unspecified vectors.

Affected configurations

Nvd
Node
leon_weberpyxtrlockRange0.1-
OR
leon_weberpyxtrlockMatch0.1beta
VendorProductVersionCPE
leon_weberpyxtrlock*cpe:2.3:a:leon_weber:pyxtrlock:*:-:*:*:*:*:*:*
leon_weberpyxtrlock0.1cpe:2.3:a:leon_weber:pyxtrlock:0.1:beta:*:*:*:*:*:*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

20.0%

Related for CVE-2013-4427