CVE-2013-7220 js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on...
MediumCVSS 4.6
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/gnome-shell(Debian:12) | < 3.8.4-1 | 3.8.4-1 |
| debian/gnome-shell(Debian:13) | < 3.8.4-1 | 3.8.4-1 |
| debian/gnome-shell(Debian:14) | < 3.8.4-1 | 3.8.4-1 |
| gnome-shell | <= 3.7.92 | No fix listed |
| gnome-shell | = 3.0.0 | No fix listed |
| gnome-shell | = 3.0.0.1 | No fix listed |
| gnome-shell | = 3.0.0.2 | No fix listed |
| gnome-shell | = 3.0.1 | No fix listed |
| gnome-shell | = 3.0.2 | No fix listed |
| gnome-shell | = 3.1.3 | No fix listed |
| gnome-shell | = 3.1.4 | No fix listed |
| gnome-shell | = 3.1.90 | No fix listed |
| gnome-shell | = 3.1.90.1 | No fix listed |
| gnome-shell | = 3.1.91 | No fix listed |
| gnome-shell | = 3.1.91.1 | No fix listed |
| gnome-shell | = 3.1.92 | No fix listed |
| gnome-shell | = 3.2.0 | No fix listed |
| gnome-shell | = 3.2.1 | No fix listed |
| gnome-shell | = 3.2.2 | No fix listed |
| gnome-shell | = 3.2.2.1 | No fix listed |
| gnome-shell | = 3.3.2 | No fix listed |
| gnome-shell | = 3.3.3 | No fix listed |
| gnome-shell | = 3.3.5 | No fix listed |
| gnome-shell | = 3.3.90 | No fix listed |
| gnome-shell | = 3.3.91 | No fix listed |
Show 24 more
| Product | Affected versions | Fixed in |
|---|---|---|
| gnome-shell | = 3.3.92 | No fix listed |
| gnome-shell | = 3.4.0 | No fix listed |
| gnome-shell | = 3.4.1 | No fix listed |
| gnome-shell | = 3.4.2 | No fix listed |
| gnome-shell | = 3.5.2 | No fix listed |
| gnome-shell | = 3.5.3 | No fix listed |
| gnome-shell | = 3.5.4 | No fix listed |
| gnome-shell | = 3.5.90 | No fix listed |
| gnome-shell | = 3.5.91 | No fix listed |
| gnome-shell | = 3.5.92 | No fix listed |
| gnome-shell | = 3.6.0 | No fix listed |
| gnome-shell | = 3.6.1 | No fix listed |
| gnome-shell | = 3.6.2 | No fix listed |
| gnome-shell | = 3.6.3 | No fix listed |
| gnome-shell | = 3.6.3.1 | No fix listed |
| gnome-shell | = 3.7.1 | No fix listed |
| gnome-shell | = 3.7.2 | No fix listed |
| gnome-shell | = 3.7.2.1 | No fix listed |
| gnome-shell | = 3.7.3 | No fix listed |
| gnome-shell | = 3.7.3.1 | No fix listed |
| gnome-shell | = 3.7.4 | No fix listed |
| gnome-shell | = 3.7.4.1 | No fix listed |
| gnome-shell | = 3.7.5 | No fix listed |
| gnome-shell | = 3.7.91 | No fix listed |
References
- Debian Security Tracker CVE-2013-7220 vendor-advisory
- [oss-security] 20131227 Two CVE request for gnome-shell/screensaver issues mailing-list
- [oss-security] 20131227 Re: Two CVE request for gnome-shell/screensaver issues mailing-list
- [oss-security] 20131227 Re: Two CVE request for gnome-shell/screensaver issues mailing-list
- bugzilla.gnome.org
- bugzilla.redhat.com
- github.com