gnome screensaver vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv2

gnome-screensaver prior to 2.28.2 allows physically proximate malicious users to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor.

Gnome Screensaver 2.20.0 Gnome Screensaver 2.20 Gnome Screensaver 2.28.0 Gnome Screensaver 2.26.1 Gnome Screensaver 2.13 Gnome Screensaver

5.6

CVSSv2

gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate malicious users to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an exte...

Gnome Screensaver 2.28.0 Gnome Screensaver 2.28.3 Gnome Screensaver 2.22.2 Gnome Screensaver 2.27 Gnome Screensaver 2.14.3

3.3

CVSSv2

gnome-screensaver 3.4.x prior to 3.4.4 and 3.5.x prior to 3.5.4, when multiple screens are used, only locks the screen with the active focus, which allows physically proximate malicious users to bypass screen locking and access an unattended workstation.

Gnome Screensaver 3.4.0 Gnome Screensaver 3.4.2 Gnome Screensaver 3.4.3 Gnome Screensaver 3.5.3

7.2

CVSSv2

The default configuration in gnome-screensaver 3.5.4 up to and including 3.6.0 sets the AutostartCondition line to fallback mode in the .desktop file, which prevents the program from starting automatically after login and allows physically proximate malicious users to bypass scre...

Gnome Gnome Screensaver 3.5.4 Gnome Gnome Screensaver 3.5.5 Gnome Gnome Screensaver 3.6.0

4

CVSSv2

gnome-screensaver 2.28.x prior to 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate malicious users to bypass screen locking and access an unattended...

Gnome Screensaver 2.28.1 Gnome Screensaver 2.28.2 Gnome Screensaver 2.28.0

6.2

CVSSv2

gdk/gdkwindow.c in GTK+ prior to 2.18.5, as used in gnome-screensaver prior to 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate malicious users to bypass screen ...

Gnome Gtk Gnome Screensaver

3.7

CVSSv2

gnome screensaver prior to 2.14, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs enabled, allows attackers with physical access to cause the screensaver to crash and access the session via the Ctl+Alt+Keypad-Multiply keyboard sequence, which removes ...

Gnome Screensaver

4.7

CVSSv2

gnome-screensaver prior to 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate malicious users to gain access to the locked session, a related issue to CVE-2007-1859.

Gnome Screensaver

7.2

CVSSv2

gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate malicious users to access an unattended workstation on which screen locking had b...

Gnome Screensaver 2.26.1

2.1

CVSSv2

The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboard contents and X selection data for a locked session by using ctrl-V.

Gnome Screensaver 2.20

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook