GNOME gnome-shell lock Local Arbitrary Command Execution Vulnerability

Release date:
Updated on:

Affected Systems:
GNOME gnome-shell
Description:
--------------------------------------------------------------------------------
Bugtraq id: 64547
CVE (CAN) ID: CVE-2013-7221

GNOME Shell is the core user interface in GNOME Desktop Environment 3.0 and later versions. It replaces GNOME Panel and other related programs in GNOME 2.0.

GNOME gnome-shell 3.9.92 and other versions have the local command execution vulnerability in implementation. Local attackers with physical access to the desktop can exploit this vulnerability to execute arbitrary commands on affected computers.

<* Source: M. Schwarz
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

GNOME
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://wiki.gnome.org/Projects/GnomeShell

GNOME details: click here
GNOME: click here

Ubuntu 13.10 can install Gnome 3.10 Through PPA

Added the pause function to GNOME Chess 3.10 Beta 1.

GNOME 3.10 beta release, a new photo display tool

How to upgrade Ubuntu 13.04 to GNOME 3.8