vinagre session - "shares" memory when doing copy/paste

Bug #344042 reported by Erwin Olario
258
Affects Status Importance Assigned to Milestone
gtk-vnc (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

Binary package hint: vinagre

I found this by accident while remotely *viewing* a desktop session.

I discovered that whenever I copy something (text mode) in memory (ie press CTRL+C) and the remote desktop viewer just happens to be doing a paste operation (ie CTRL+V in text mode) the remote user will instead paste whatever is in MY memory. If I do the pasting, and the remote user just did a copy command, I will get his copy of text instead.

This happened using 64-bit Intrepid machines, remote desktop user was copying text from a browser into oowriter while I'm copying text from a gedit session.

I assumed that while I'm on a "view only" session of Vinagre, I don't interact in any way with the remote desktop except to see what's on their screen. I believe that this is a security issue, or at least concerns privacy.

Ubuntu: 64-bit Intrepid 8.10
Vinagre: 2.24.1-0ubuntu1.1

Revision history for this message
Jonh Wendell (wendell) wrote :
Changed in vinagre:
importance: Undecided → Medium
status: New → Fix Committed
Revision history for this message
Robert Ancell (robert-ancell) wrote :

Fixed in gtk-vnc 0.3.9

Changed in gtk-vnc (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.