CVE-2010-0732
- State
- Published
- Severity
- Not scored
- Published
- Mar 19, 2010
- Updated
- Aug 7, 2024
- Reserved
- Feb 26, 2010
Description
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 39317third-party-advisory
- [oss-security] 20100212 CVE Request: gnome-screensaver termination by pressing "Enter"mailing-list
- [oss-security] 20100316 Re: Re: CVE Request: gnome-screensaver termination by pressing "Enter"mailing-list
- 38211vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=565527
- http://git.gnome.org/browse/gnome-screensaver/commit/?id=ab08cc93f2dc6223c8c00bfa1ca4f2d89069dbe0
- SUSE-SR:2010:008vendor-advisory
- http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news
- MDVSA-2010:109vendor-advisory
- http://git.gnome.org/browse/gnome-screensaver/commit/?h=gnome-2-28&id=98f8a22412cf388217fd5b88915eadd274d68520
- https://bugs.edge.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/446395
- https://bugzilla.gnome.org/show_bug.cgi?id=598476
- [oss-security] 20100305 Re: CVE Request: gnome-screensaver termination by pressing "Enter"mailing-list
- http://git.gnome.org/browse/gtk+/commit/?id=0748cf563d0d0d03001a62589f13be16a8ec06c1
- http://www.heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.