CVE-2012-0064

Published: Feb 10, 2014Modified: Apr 29, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab.

Affected (27)

Products: X: X.org X11 · Xkeyboard Config Project: Xkeyboard Config

1 product

Xkeyboard Config Project

1 product

Xkeyboard Config

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
X X.org X11	Up to 7.5
X X.org X11	Version 1.0
X X.org X11	Version 3.0
X X.org X11	Version 4.0
X X.org X11	Version 5.0
X X.org X11	Version 6.0
X X.org X11	Version 6.1
X X.org X11	Version 6.3
X X.org X11	Version 6.4
X X.org X11	Version 6.5.1
X X.org X11	Version 6.6
X X.org X11	Version 6.7
X X.org X11	Version 6.8.1
X X.org X11	Version 6.8.2
X X.org X11	Version 6.8
X X.org X11	Version 6.9.0
X X.org X11	Version 7.0
X X.org X11	Version 7.1
X X.org X11	Version 7.2
X X.org X11	Version 7.3
X X.org X11	Version 7.4
X X.org X11	Version 7.5
Xkeyboard Config Project Xkeyboard Config	Up to 2.4
Xkeyboard Config Project Xkeyboard Config	Version 2.0
Xkeyboard Config Project Xkeyboard Config	Version 2.1
Xkeyboard Config Project Xkeyboard Config	Version 2.2
Xkeyboard Config Project Xkeyboard Config	Version 2.3

Related CWEs

References (18)

http://gu1.aeroxteam.fr/2012/01/19/bypass-screensaver-locker-program-xorg-111-and-up/

Source: secalert@redhat.com

http://lists.x.org/archives/xorg-announce/2012-January/001797.html

Source: secalert@redhat.com

http://lists.x.org/archives/xorg-devel/2012-January/028691.html

Source: secalert@redhat.com

http://securitytracker.com/id?1026549

Source: secalert@redhat.com

http://who-t.blogspot.com/2012/01/xkb-breaking-grabs-cve-2012-0064.html

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/01/19/6

Source: secalert@redhat.com

http://www.osvdb.org/78445

Source: secalert@redhat.com

http://www.x.org/wiki/Development/Security/

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=783039

Source: secalert@redhat.com

http://gu1.aeroxteam.fr/2012/01/19/bypass-screensaver-locker-program-xorg-111-and-up/

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.x.org/archives/xorg-announce/2012-January/001797.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.x.org/archives/xorg-devel/2012-January/028691.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1026549

Source: af854a3a-2127-422b-91ae-364da2661108

http://who-t.blogspot.com/2012/01/xkb-breaking-grabs-cve-2012-0064.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/01/19/6

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/78445

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.x.org/wiki/Development/Security/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=783039

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.