Information disclosure in Vino - CVE-2012-4429
Published: October 1, 2012 / Updated: August 11, 2020
Vulnerability identifier: #VU43454
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2012-4429
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Gnome Development Team
Affected software:
Vino
Vino
Detailed vulnerability description
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
Vino 2.28, 2.32, 3.4.2, and earlier allows remote attackers to read clipboard activity by listening on TCP port 5900.
How to mitigate CVE-2012-4429
Install update from vendor's website.
Sources
- http://rhn.redhat.com/errata/RHSA-2013-0169.html
- http://secunia.com/advisories/50527
- http://www.openwall.com/lists/oss-security/2012/09/13/25
- http://www.openwall.com/lists/oss-security/2012/09/14/1
- http://www.securityfocus.com/bid/55548
- http://www.ubuntu.com/usn/USN-1701-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78602