CVE Feed

    Dashboard / CVE / CVE-2010-0732

    CVE-2010-0732

    gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.

    Published:Oct 14, 2009
    Last Modified:Apr 11, 2025
    EPS:Mar 19, 2010
    EPSS Score:0.00041
    CVSS Score:6.2

    Affected Products

    Vendor
    Gnome
    Product
    Gtk
    Vendor
    Gnome
    Product
    Screensaver

    Exploits

    No exploit reference

    Related CVEs

    CVE-2014-1949 (CVSS 7.2) — GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows ph…
    CVE-2012-0828 (CVSS 9.8) — Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could all…
    CVE-2010-4833 (CVSS 9.3) — Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows loca…
    CVE-2010-4831 (CVSS 6.9) — Untrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows local users to …
    CVE-2007-0010 (CVSS 2.1) — The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent att…
    CVE-2005-2975 (CVSS 7.8) — io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial…
    CVE-2005-2976 (CVSS 7.5) — Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of s…
    CVE-2005-0891 (CVSS 7.5) — Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (c…
    CVE-2005-0372 (CVSS 5) — Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read a…
    CVE-2004-0788 (CVSS 5) — Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remo…

    References

    http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news
    http://git.gnome.org/browse/gnome-screensaver/commit/?h=gnome-2-28&id=98f8a22412cf388217fd5b88915eadd274d68520
    http://git.gnome.org/browse/gnome-screensaver/commit/?id=ab08cc93f2dc6223c8c00bfa1ca4f2d89069dbe0
    http://git.gnome.org/browse/gtk+/commit/?id=0748cf563d0d0d03001a62589f13be16a8ec06c1
    http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
    http://secunia.com/advisories/39317
    http://www.heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html
    http://www.mandriva.com/security/advisories?name=MDVSA-2010:109
    http://www.openwall.com/lists/oss-security/2010/02/12/1
    http://www.openwall.com/lists/oss-security/2010/03/05/2
    http://www.openwall.com/lists/oss-security/2010/03/16/9
    http://www.securityfocus.com/bid/38211
    https://bugs.edge.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/446395
    https://bugzilla.gnome.org/show_bug.cgi?id=598476
    https://bugzilla.redhat.com/show_bug.cgi?id=565527
    http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news
    http://git.gnome.org/browse/gnome-screensaver/commit/?h=gnome-2-28&id=98f8a22412cf388217fd5b88915eadd274d68520
    http://git.gnome.org/browse/gnome-screensaver/commit/?id=ab08cc93f2dc6223c8c00bfa1ca4f2d89069dbe0
    http://git.gnome.org/browse/gtk+/commit/?id=0748cf563d0d0d03001a62589f13be16a8ec06c1
    http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
    http://secunia.com/advisories/39317
    http://www.heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html
    http://www.mandriva.com/security/advisories?name=MDVSA-2010:109
    http://www.openwall.com/lists/oss-security/2010/02/12/1
    http://www.openwall.com/lists/oss-security/2010/03/05/2
    http://www.openwall.com/lists/oss-security/2010/03/16/9
    http://www.securityfocus.com/bid/38211
    https://bugs.edge.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/446395
    https://bugzilla.gnome.org/show_bug.cgi?id=598476
    https://bugzilla.redhat.com/show_bug.cgi?id=565527

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High