CVE-2006-6953

The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots.
Configurations

Configuration 1 (hide)

cpe:2.3:a:globetrotter:mobility_manager:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:24

Type Values Removed Values Added
References () http://img45.imageshack.us/my.php?image=poc7ik.jpg - () http://img45.imageshack.us/my.php?image=poc7ik.jpg -
References () http://www.securityfocus.com/archive/1/438376/100/100/threaded - () http://www.securityfocus.com/archive/1/438376/100/100/threaded -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/27447 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/27447 -

Information

Published : 2007-01-29 16:28

Updated : 2024-11-21 00:24


NVD link : CVE-2006-6953

Mitre link : CVE-2006-6953

CVE.ORG link : CVE-2006-6953


JSON object : View

Products Affected

globetrotter

  • mobility_manager
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor