Vulnerability: Clutter Device Manager XI2 Disappeared Device Handling Allows Unauthorized Access

Vulnerability: Clutter Device Manager XI2 Disappeared Device Handling Allows Unauthorized Access

CVE-2013-2190 · LOW Severity

AV:L/AC:L/AU:N/C:P/I:N/A:N

The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous gnome-shell session via unspecified vectors.

Learn more about our Physical Security Assessment.