Back to search
CVE-2012-1620
Published: Jul 12, 2012
Modified: Aug 6, 2024
PUBLISHED
Description
slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proximate attackers to obtain sensitive information by pressing a button, which reveals the desktop and active windows.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://bugs.gentoo.org/show_bug.cgi?id=401645
x_refsource_MISC
[oss-security] 20120405 Re: CVE Request: slock-0.9 displays modal box after locking
mailing-list
x_refsource_MLIST
[oss-security] 20120405 CVE Request: slock-0.9 displays modal box after locking
mailing-list
x_refsource_MLIST
48700
third-party-advisory
x_refsource_SECUNIA
slock-xraisewindow-sec-bypass(74666)
vdb-entry
x_refsource_XF
81035
vdb-entry
x_refsource_OSVDB
52922
vdb-entry
x_refsource_BID
http://hg.suckless.org/slock/rev/891a4984aba6
x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=786310
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now