Description
The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboard contents and X selection data for a locked session by using ctrl-V.
CVSS vector
AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9Complexity: Low
Integrity: None
Availability: None
Affected Packages1 packages
🔴Vulnerability Details
3GHSAGHSA-qp6p-hvgc-rmqv: The notify feature in GNOME screensaver (gnome-screensaver) 2↗2022-05-01 OSVCVE-2007-6389: The notify feature in GNOME screensaver (gnome-screensaver) 2↗2007-12-17 CVEListCVE-2007-6389: The notify feature in GNOME screensaver (gnome-screensaver) 2↗2007-12-17 📋Vendor Advisories
3Ubuntugnome-screensaver vulnerabilities↗2008-11-11 Red Hatgnome-screensaver clipboard content leak↗2007-12-12 DebianCVE-2007-6389: gnome-screensaver - The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow l...↗2007 💬Community
1BugzillaCVE-2007-6389 gnome-screensaver clipboard content leak↗2007-12-12