VIR Vulnerability Intelligence Relay

CVE-2013-7220

medium
Published 2014-04-29 · Modified 2026-05-06
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
4.6

Description

js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

OS impact
OSVersionStatusFixed in
debian debianbookwormfixed3.8.4-1
debian debianbullseyefixed3.8.4-1
debian debianforkyfixed3.8.4-1
debian debiansidfixed3.8.4-1
debian debiantrixiefixed3.8.4-1

Application impact
VendorProductVersionsFixed
gnomegnome-shell{"endIncluding":"3.7.92"}
gnomegnome-shell3.0.0
gnomegnome-shell3.0.0.1
gnomegnome-shell3.0.0.2
gnomegnome-shell3.0.1
gnomegnome-shell3.0.2
gnomegnome-shell3.1.3
gnomegnome-shell3.1.4
gnomegnome-shell3.1.90
gnomegnome-shell3.1.90.1
gnomegnome-shell3.1.91
gnomegnome-shell3.1.91.1
gnomegnome-shell3.1.92
gnomegnome-shell3.2.0
gnomegnome-shell3.2.1
gnomegnome-shell3.2.2
gnomegnome-shell3.2.2.1
gnomegnome-shell3.3.2
gnomegnome-shell3.3.3
gnomegnome-shell3.3.5
gnomegnome-shell3.3.90
gnomegnome-shell3.3.91
gnomegnome-shell3.3.92
gnomegnome-shell3.4.0
gnomegnome-shell3.4.1
gnomegnome-shell3.4.2
gnomegnome-shell3.5.2
gnomegnome-shell3.5.3
gnomegnome-shell3.5.4
gnomegnome-shell3.5.90
gnomegnome-shell3.5.91
gnomegnome-shell3.5.92
gnomegnome-shell3.6.0
gnomegnome-shell3.6.1
gnomegnome-shell3.6.2
gnomegnome-shell3.6.3
gnomegnome-shell3.6.3.1
gnomegnome-shell3.7.1
gnomegnome-shell3.7.2
gnomegnome-shell3.7.2.1
gnomegnome-shell3.7.3
gnomegnome-shell3.7.3.1
gnomegnome-shell3.7.4
gnomegnome-shell3.7.4.1
gnomegnome-shell3.7.5
gnomegnome-shell3.7.91

References

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.