MEDIUM
gnome-screensaver: Race condition between shaking the unlock dialog and clearing the screen
Published Mar 19, 2010
6.2
MEDIUMCVSS 2.0
EPSS 0.30%
Description
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.
Affected products
No data.
Configuration 2
- < 2.28.1
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (18)
- http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news x_refsource_CONFIRMVendor Advisory
- http://git.gnome.org/browse/gnome-screensaver/commit/?h=gnome-2-28&id=98f8a22412cf388217fd5b88915eadd274d68520 x_refsource_CONFIRMVendor Advisory
- http://git.gnome.org/browse/gnome-screensaver/commit/?id=ab08cc93f2dc6223c8c00bfa1ca4f2d89069dbe0 x_refsource_CONFIRMPatch
- http://git.gnome.org/browse/gtk+/commit/?id=0748cf563d0d0d03001a62589f13be16a8ec06c1 x_refsource_CONFIRMPatch
- http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html vendor-advisoryx_refsource_SUSEThird Party Advisory
- http://secunia.com/advisories/39317 third-party-advisoryx_refsource_SECUNIABroken Link
- http://www.heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html x_refsource_MISCThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:109 vendor-advisoryx_refsource_MANDRIVABroken Link
- http://www.openwall.com/lists/oss-security/2010/02/12/1 mailing-listx_refsource_MLISTMailing List
- http://www.openwall.com/lists/oss-security/2010/03/05/2 mailing-listx_refsource_MLISTMailing ListPatch
- http://www.openwall.com/lists/oss-security/2010/03/16/9 mailing-listx_refsource_MLISTMailing List
- http://www.securityfocus.com/bid/38211 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- https://access.redhat.com/security/cve/CVE-2010-0732 Vendor Advisory
- https://bugs.edge.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/446395 x_refsource_CONFIRMThird Party Advisory
- https://bugzilla.gnome.org/show_bug.cgi?id=598476 x_refsource_CONFIRMIssue TrackingPatch
- https://bugzilla.redhat.com/show_bug.cgi?id=565527 x_refsource_CONFIRMIssue TrackingPatch
- https://nvd.nist.gov/vuln/detail/CVE-2010-0732
- https://www.cve.org/CVERecord?id=CVE-2010-0732
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Mar 19, 2010
Updated Aug 7, 2024
Reserved Feb 26, 2010
Link CVE-2010-0732
CISA Vulnrichment
Updated n/a