ID CVE-2007-6389
Summary The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboard contents and X selection data for a locked session by using ctrl-V.
References
Vulnerable Configurations
  • cpe:2.3:a:gnome:screensaver:2.20:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:screensaver:2.20:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 31-10-2012 - 02:48)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 30096
confirm
fedora
  • FEDORA-2008-2818
  • FEDORA-2008-2872
mandriva MDVSA-2008:135
secunia
  • 29595
  • 29666
  • 31687
  • 32691
suse SUSE-SR:2008:017
ubuntu USN-669-1
Last major update 31-10-2012 - 02:48
Published 17-12-2007 - 18:46
Last modified 31-10-2012 - 02:48
Back to Top