CVE-2013-4427

Published: May 19, 2014Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

pyxtrlock before 0.2 does not properly check the return values of the (1) xcb_grab_pointer and (2) xcb_grab_keyboard XCB library functions, which allows physically proximate attackers to gain access to the keyboard or mouse without unlocking the screen via unspecified vectors.

Affected (2)

Products: Leon Weber: Pyxtrlock

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Leon Weber Pyxtrlock	Up to 0.1
Leon Weber Pyxtrlock	Version 0.1 beta

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://www.openwall.com/lists/oss-security/2013/09/25/16

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/10/16/8

Source: secalert@redhat.com

https://github.com/leonnnn/pyxtrlock/blob/master/CHANGELOG

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/09/25/16

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/10/16/8

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/leonnnn/pyxtrlock/blob/master/CHANGELOG

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.