Vulnerability in Suckless Slock

CVE-2012-1620

slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proximate attackers to obtain sensitive information by pressing a button, which reveals the desktop and active windows.

EPSS: 0.005 (40.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References