PT-2014-3289

Name of the Vulnerable Software and Affected Versions GNOME Shell aka gnome-shell versions prior to 3.8 Description The issue allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search field in the...

PT-2014-3290

Name of the Vulnerable Software and Affected Versions GNOME Shell versions prior to 3.10 Description The issue concerns the automatic screen lock functionality in GNOME Shell, which fails to prevent access to the "Enter a Command" dialog. This allows physically proximate attackers to execute...

CVE-2013-7220: Undefined Security Weakness

js/ui/screenShield.js in GNOME Shell aka gnome-shell before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search...

CVE-2013-7221: Undefined Security Weakness

The automatic screen lock functionality in GNOME Shell aka gnome-shell before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation...

GNOME gnome-shell本地任意命令执行漏洞

Bugtraq ID:64546 CVE ID:CVE-2013-7220 gnome是一个linux操作系统的桌面环境, gnome-shell是gnome桌面环境的窗口管理程序。 GNOME gnome-shell用户打开Activities面板或者"Enter a command"对话框Alt+F2，然后锁屏时存在一个安全漏洞，允许本地攻击者利用漏洞在锁屏上输入任意命令并执行任意命令。 0 GNOME gnome-shell 厂商补丁： GNOME ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

Fedora 20 : gnome-shell-3.10.2.1-2.fc20 (2013-22168)

This update fixes a problem where the login screen doesn't reset properly in some cases after user switching. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

[SECURITY] Fedora 20 Update: gnome-shell-3.10.2.1-2.fc20

GNOME Shell provides core user interface functions for the GNOME 3 desktop, like switching to windows and launching applications. GNOME Shell takes advantage of the capabilities of modern graphics hardware and introduces innovative user interface concepts to provide a visually attractive and easy...

Mandriva Linux Security Advisory : clutter (MDVSA-2013:255)

Updated clutter packages fix security vulnerability : A security flaw was found in the way Clutter, an open source software library for creating rich graphical user interfaces, used to manage translation of hierarchy events in certain circumstances when underlying device disappeared, causing...

CVE-2013-2190

The translatehierarchyevent function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous...

CVE-2013-2190

The translatehierarchyevent function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous...

DEBIAN-CVE-2013-2190

The translatehierarchyevent function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous...

Design/Logic Flaw

The translatehierarchyevent function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous...

CVE-2013-2190

The translatehierarchyevent function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous...

UBUNTU-CVE-2013-2190

The translatehierarchyevent function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous...

CVE-2013-2190

The translatehierarchyevent function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous...

CVE-2013-2190

The translatehierarchyevent function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous...

CVE-2013-2190

The translatehierarchyevent function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous...

CVE-2013-2190

The CVE-2013-2190 issue affects Clutter, specifically the translate_hierarchy_event handling in clutter-device-manager-xi2.c. When resuming, XIQueryDevice errors from a disappeared device were not handled correctly, causing gnome-shell to crash and potentially allow a local attacker to access the...

Updated clutter packages fix CVE-2013-2190

Updated clutter packages fix security vulnerability: A security flaw was found in the way Clutter, an open source software library for creating rich graphical user interfaces, used to manage translation of hierarchy events in certain circumstances when underlying device disappeared, causing...

CVE-2013-2190: Undefined Security Weakness

The translatehierarchyevent function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous...