PRIOn knowledge basePRION:CVE-2010-0414Code injection
6.6 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
26.2%
gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor.
| CPE | Name | Operator | Version |
|---|---|---|---|
| screensaver | eq | 2.20.0 | |
| screensaver | eq | 2.13 | |
| screensaver | le | 2.28.1 | |
| screensaver | eq | 2.20 | |
| screensaver | eq | 2.28.0 | |
| screensaver | eq | 2.26.1 |
References
ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.2.news
git.gnome.org/browse/gnome-screensaver/commit/?id=a5f66339be6719c2b8fc478a1d5fc6545297d950
git.gnome.org/browse/gnome-screensaver/commit/?id=dcca89b7ab6e1220815af38da246434b2e13fd9f
secunia.com/advisories/38468
secunia.com/advisories/38532
secunia.com/advisories/38534
www.mandriva.com/security/advisories?name=MDVSA-2010:040
www.osvdb.org/62219
www.securityfocus.com/bid/38149
www.ubuntu.com/usn/USN-898-1
bugzilla.gnome.org/show_bug.cgi?id=609337
bugzilla.redhat.com/show_bug.cgi?id=562217
lists.fedoraproject.org/pipermail/package-announce/2010-February/034904.html
Related
6.6 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
26.2%