CVE-2013-7220
published 2014-04-29CVE-2013-7220: js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an…
PriorityP427medium4.6CVSS 2.0
AVLACLAuNCPIPAP
EPSS
0.41%
33.5th percentile
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
Affected
51 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gnome-shell | < gnome-shell 3.8.4-1 (bookworm) | gnome-shell 3.8.4-1 (bookworm) |
| gnome | gnome-shell | <= 3.7.92 | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
CVSS provenance
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
osv4.6MEDIUM
vendor_debian4.6MEDIUM
vendor_redhat4.6MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9965-5x5j-j3rf: js/ui/screenShield
ghsa_unreviewed·2022-05-17
CVE-2013-7220 [MEDIUM] GHSA-9965-5x5j-j3rf: js/ui/screenShield
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
OSV
CVE-2013-7220: js/ui/screenShield
osv·2014-04-29·CVSS 4.6
CVE-2013-7220 [MEDIUM] CVE-2013-7220: js/ui/screenShield
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
Red Hat
gnome-shell: blind command execution via activities search keyboard focus
vendor_redhat·2013-11-14·CVSS 4.6
CVE-2013-7220 [MEDIUM] gnome-shell: blind command execution via activities search keyboard focus
gnome-shell: blind command execution via activities search keyboard focus
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
Package: gnome-shell (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2013-7220: gnome-shell - js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physica...
vendor_debian·2013·CVSS 4.6
CVE-2013-7220 [MEDIUM] CVE-2013-7220: gnome-shell - js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physica...
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
Scope: local
bookworm: resolved (fixed in 3.8.4-1)
bullseye: resolved (fixed in 3.8.4-1)
forky: resolved (fixed in 3.8.4-1)
sid: resolved (fixed in 3.8.4-1)
trixie: resolved (fixed in 3.8.4-1)
No detection rules found.
No public exploits indexed.
http://www.openwall.com/lists/oss-security/2013/12/27/4http://www.openwall.com/lists/oss-security/2013/12/27/6http://www.openwall.com/lists/oss-security/2013/12/27/8https://bugzilla.gnome.org/show_bug.cgi?id=686740https://bugzilla.redhat.com/show_bug.cgi?id=1030431https://github.com/o2platform/DefCon_RESTing/tree/master/Live-Demos/Neo4jhttp://www.openwall.com/lists/oss-security/2013/12/27/4http://www.openwall.com/lists/oss-security/2013/12/27/6http://www.openwall.com/lists/oss-security/2013/12/27/8https://bugzilla.gnome.org/show_bug.cgi?id=686740https://bugzilla.redhat.com/show_bug.cgi?id=1030431https://github.com/o2platform/DefCon_RESTing/tree/master/Live-Demos/Neo4j
2014-04-29
Published