Vulnerability Details CVE-2006-6953
The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.3%
CVSS Severity
CVSS v2 Score 2.1
References
- http://img45.imageshack.us/my.php?image=poc7ik.jpg
- http://www.securityfocus.com/archive/1/438376/100/100/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27447
- http://img45.imageshack.us/my.php?image=poc7ik.jpg
- http://www.securityfocus.com/archive/1/438376/100/100/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27447
Products affected by CVE-2006-6953
-
cpe:2.3:a:globetrotter:mobility_manager:*