Lenovo USB Enhanced Performance Keyboard software before 2.0.2.2 includes active debugging code in SKHOOKS.DLL, which allows local users to obtain keypress information by accessing debug output.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/74196 | Third Party Advisory VDB Entry |
https://support.lenovo.com/us/en/product_security/usbenhancedkeyboard | Patch Vendor Advisory |
Configurations
Information
Published : 2015-04-16 16:59
Updated : 2017-01-17 18:59
NVD link : CVE-2015-3320
Mitre link : CVE-2015-3320
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
lenovo
- usb_enhanced_performance_keyboard