CVE-2006-6953
The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots.
- Score
- CVSS 2.0 2.1 Low
- Status
- Modified - cve@mitre.org
- Published
- 2007-01-29
- Last modified
- 2024-08-07
- Weaknesses
- CWE-200
Affected products
References
- http://img45.imageshack.us/my.php?image=poc7ik.jpg
- http://www.securityfocus.com/archive/1/438376/100/100/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27447
