Information disclosure in Vino - CVE-2012-4429
Published: October 1, 2012 / Updated: August 11, 2020
Vulnerability identifier: #VU43454
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2012-4429
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
Vino 2.28, 2.32, 3.4.2, and earlier allows remote attackers to read clipboard activity by listening on TCP port 5900.
Affected software
Vino
How to mitigate CVE-2012-4429
Install update from vendor's website.
External References
- http://rhn.redhat.com/errata/RHSA-2013-0169.html
- http://secunia.com/advisories/50527
- http://www.openwall.com/lists/oss-security/2012/09/13/25
- http://www.openwall.com/lists/oss-security/2012/09/14/1
- http://www.securityfocus.com/bid/55548
- http://www.ubuntu.com/usn/USN-1701-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78602