Lenovo USB Enhanced Performance Keyboard software before 2.0.2.2 includes active debugging code in SKHOOKS.DLL, which allows local users to obtain keypress information by accessing debug output.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/74196 | Third Party Advisory VDB Entry |
| https://support.lenovo.com/us/en/product_security/usbenhancedkeyboard | Patch Vendor Advisory |
Configurations
Information
Published : 2015-04-16 23:59
Updated : 2017-01-18 02:59
NVD link : CVE-2015-3320
Mitre link : CVE-2015-3320
JSON object : View
Products Affected
lenovo
- usb_enhanced_performance_keyboard
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
