CVE-2013-2190
Last modified
CVE-2013-2190 is a vulnerability of currently unknown severity. The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous gnome-shell session via unspecified vectors.. EPSS estimates a 0.53% chance of exploitation in the next 30 days.
Description
The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous gnome-shell session via unspecified vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Clutter Project | Clutter | All versions |
| Opensuse | Opensuse | 12.2 |
| Opensuse | Opensuse | 12.3 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-2190?
How severe is CVE-2013-2190?
How do I fix CVE-2013-2190?
Are you affected by CVE-2013-2190?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
