CVE Feed

    Dashboard / CVE / CVE-2010-0422

    CVE-2010-0422

    gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, a related issue to CVE-2010-0414.

    Published:Feb 12, 2010
    Last Modified:Apr 11, 2025
    EPS:Feb 24, 2010
    EPSS Score:0.00076
    CVSS Score:4

    Affected Products

    Vendor
    Gnome
    Product
    Screensaver

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2012-3452 (CVSS 3.3) — gnome-screensaver 3.4.x before 3.4.4 and 3.5.x before 3.5.4, when multiple screens are used, only locks the sc…
    CVE-2009-4642 (CVSS 7.2) — gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when…
    CVE-2010-0414 (CVSS 7.2) — gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an u…
    CVE-2009-4641 (CVSS 7.2) — gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application …
    CVE-2010-0732 (CVSS 6.2) — gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on…
    CVE-2010-0285 (CVSS 5.6) — gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend scre…
    CVE-2008-0887 (CVSS 4.7) — gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attemp…
    CVE-2007-6389 (CVSS 2.1) — The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboa…
    CVE-2007-3920 (CVSS 6.2) — GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which all…
    CVE-2006-1335 (CVSS 3.7) — gnome screensaver before 2.14, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs e…

    References

    http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.3.news
    http://git.gnome.org/browse/gnome-screensaver/commit/?id=271ae93d7b140b8ba40d77f9e4ce894e5fd1b554
    http://git.gnome.org/browse/gnome-screensaver/commit/?id=d4dcbd65a2df3c093c4e3a74bbbc75383eb9eadb
    http://git.gnome.org/browse/gnome-screensaver/commit/?id=f93a22c175090cf02e80bc3ee676b53f1251f685
    http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035115.html
    http://marc.info/?l=oss-security&m=126601292400764&w=2
    http://secunia.com/advisories/38565
    http://secunia.com/advisories/38583
    http://www.securityfocus.com/bid/38248
    https://bugzilla.gnome.org/show_bug.cgi?id=609789
    https://bugzilla.redhat.com/show_bug.cgi?id=564464
    https://exchange.xforce.ibmcloud.com/vulnerabilities/56364
    http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.3.news
    http://git.gnome.org/browse/gnome-screensaver/commit/?id=271ae93d7b140b8ba40d77f9e4ce894e5fd1b554
    http://git.gnome.org/browse/gnome-screensaver/commit/?id=d4dcbd65a2df3c093c4e3a74bbbc75383eb9eadb
    http://git.gnome.org/browse/gnome-screensaver/commit/?id=f93a22c175090cf02e80bc3ee676b53f1251f685
    http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035115.html
    http://marc.info/?l=oss-security&m=126601292400764&w=2
    http://secunia.com/advisories/38565
    http://secunia.com/advisories/38583
    http://www.securityfocus.com/bid/38248
    https://bugzilla.gnome.org/show_bug.cgi?id=609789
    https://bugzilla.redhat.com/show_bug.cgi?id=564464
    https://exchange.xforce.ibmcloud.com/vulnerabilities/56364

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High