CVE-2017-8288

gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen

published April 27, 2017

CVSS
—
EPSS
3%
Percentile
86.9
In the wild
Unconfirmed
What it is

gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications (but not interact with them), see information from the extensions (e.g., what applications you have opened or what music you were playing), or even execute arbitrary commands. It all depends on what extensions a user has enabled. The problem is caused by lack of exception handling in js/ui/extensionSystem.js.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02940 · 86.9th percentile
Published
2017-04-27T00:00Z
EPSS history
Timeline
  • 27 APR 00:00Z
    gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen
    cvelistv5