Design/Logic Flaw

2009-04-0915:08:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.7%

JSON

XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.

CPENameOperatorVersion
opensolariseq<= snv-108
opensolariseqsnv-1 sparc
opensolariseqsnv-2 sparc
opensolariseqsnv-3 sparc
opensolariseqsnv-4 sparc
opensolariseqsnv-5 sparc
opensolariseqsnv-6 sparc
opensolariseqsnv-7 sparc
opensolariseqsnv-8 sparc
opensolariseqsnv-9 sparc

Name	Operator	Version
opensolaris	eq	<= snv-108
opensolaris	eq	snv-1 sparc
opensolaris	eq	snv-2 sparc
opensolaris	eq	snv-3 sparc
opensolaris	eq	snv-4 sparc
opensolaris	eq	snv-5 sparc
opensolaris	eq	snv-6 sparc
opensolaris	eq	snv-7 sparc
opensolaris	eq	snv-8 sparc
opensolaris	eq	snv-9 sparc