CVE-2013-7220
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate...
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
Exploit likelihood
What each source reports
NVD Score used
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
- Record
CVE-2013-7220- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
- Record
CVE-2013-7220- Updated
- 2026-11-02
EUVDEUVD-2013-7003 No score
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
- Record
EUVD-2013-7003- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9965-5x5j-j3rf No score
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate...
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
- Record
GHSA-9965-5x5j-j3rf- Updated
- 2026-11-02
OSV No score
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
- Record
CVE-2013-7220- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-7220 No score
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
- Record
DEBIAN-CVE-2013-7220- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-7220 No score
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
- Record
UBUNTU-CVE-2013-7220- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gnome-shellDebian:12 |
before 3.8.4-1 | 3.8.4-1 |
gnome-shellDebian:13 |
before 3.8.4-1 | 3.8.4-1 |
gnome-shellDebian:14 |
before 3.8.4-1 | 3.8.4-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-7220 is a medium vulnerability (CVSS 4.6) in Gnome Gnome-shell, published April 29, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in gnome-shell 3.8.4-1.