CVE-2009-4642 — Screensaver vulnerability

7 documents7 sources
Severity
7.2HIGHNVD
EPSS
0.2%
top 63.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Gnome Screensaver
Timeline
PublishedFeb 11
Latest updateMay 2

Description

gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDgnome/screensaver2.26.1

🔴Vulnerability Details

3
GHSA
GHSA-fv9m-992g-7qrw: gnome-screensaver 2↗2022-05-02
▶
CVEList
CVE-2009-4642: gnome-screensaver 2↗2010-02-11
▶
OSV
CVE-2009-4642: gnome-screensaver 2↗2010-02-11
▶

📋Vendor Advisories

2
Debian
CVE-2009-4642: gnome-screensaver - gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determin...↗2009
▶
Red Hat
xfce4-session: gnome-screensaver fails to determine session idle time when runned under Xfce↗
▶

💬Community

1
Bugzilla
CVE-2009-4642 gnome-screensaver, xfce4-session: gnome-screensaver fails to determine session idle time when runned under Xfce↗2010-02-13
▶
CVE-2009-4642 — Gnome Screensaver vulnerability | cvebase