NVD

Id
41965  
Name
CVE-2013-7221  
Description
The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-04-29  
Modified Date
2014-04-29  
Seq
2013-7221  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
211806 41965 CVE-2013-7221 [oss-security] 20131227 Two CVE request for gnome-shell/screensaver issues  View
211807 41965 CVE-2013-7221 [oss-security] 20131227 Re: Two CVE request for gnome-shell/screensaver issues  View
211808 41965 CVE-2013-7221 https://bugzilla.gnome.org/show_bug.cgi?id=708313  View
211809 41965 CVE-2013-7221 https://git.gnome.org/browse/gnome-shell/commit/js/ui/main.js?id=efdf1ff755943fba1f8a9aaeff77daa3ed338088  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24790 JVNDB-2013-006365 GNOME Shell の自動スクリーンロック機能における任意のコマンドを実行される脆弱性 GNOME Shell (別名 gnome-shell) の自動スクリーンロック機能は、"Enter a Command" ダイアログへのアクセスを適切に制限しないため、任意のコマンドを実行される脆弱性が存在します。 CVE-2013-7221 67163 CVE-2013-7221 41965 4.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006365.html 2013-09-18 2014-05-01 View