CVE Feed

    Dashboard / CVE / CVE-2013-2190

    CVE-2013-2190

    The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous gnome-shell session via unspecified vectors.

    Published:Jun 18, 2013
    Last Modified:Apr 11, 2025
    EPS:Oct 17, 2013
    EPSS Score:0.00078
    CVSS Score:2.1

    Affected Products

    Vendor
    Clutter Project
    Product
    Clutter
    Vendor
    Opensuse
    Product
    Opensuse

    Exploits

    https://git.gnome.org/browse/clutter/commit/?h=clutter-1.14&id=e310c68d7b38d521e341f4e8a36f54303079d74ehttps://git.gnome.org/browse/clutter/commit/?h=clutter-1.14&id=e310c68d7b38d521e341f4e8a36f54303079d74e

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://lists.opensuse.org/opensuse-updates/2013-10/msg00014.html
    http://www.openwall.com/lists/oss-security/2013/06/19/1
    https://bugzilla.gnome.org/show_bug.cgi?id=701974
    https://bugzilla.redhat.com/show_bug.cgi?id=980111
    https://git.gnome.org/browse/clutter/commit/?h=clutter-1.14&id=e310c68d7b38d521e341f4e8a36f54303079d74e
    https://git.gnome.org/browse/clutter/commit/?h=clutter-1.16&id=d343cc6289583a7b0d929b82b740499ed588b1ab
    http://lists.opensuse.org/opensuse-updates/2013-10/msg00014.html
    http://www.openwall.com/lists/oss-security/2013/06/19/1
    https://bugzilla.gnome.org/show_bug.cgi?id=701974
    https://bugzilla.redhat.com/show_bug.cgi?id=980111
    https://git.gnome.org/browse/clutter/commit/?h=clutter-1.14&id=e310c68d7b38d521e341f4e8a36f54303079d74e
    https://git.gnome.org/browse/clutter/commit/?h=clutter-1.16&id=d343cc6289583a7b0d929b82b740499ed588b1ab

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High