Unscored severity · published Jan 29, 2007
CVE-2006-6953
The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
Mobility Manager · Globetrotter
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6953
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6953
img45.imageshack.us
http://img45.imageshack.us/my.php?image=poc7ik.jpg
www.securityfocus.com
http://www.securityfocus.com/archive/1/438376/100/100/threaded
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27447