gnome-screensaver -- Multiple monitor hotplug issues

Ray Strode reports: Under certain circumstances it is possible to circumvent the security of screen locking functionality of gnome-screensaver by changing the systems physical monitor configuration. gnome-screensaver can lose its keyboard grab when locked, exposing the system to intrusion by addi...

Aqua Real Local Crash

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Exploit Title: Local Crash PoC Author: R3d-D3V!L Software Link: http://aquarealscreensaver.com/ vuln-Version: Aqua Real 1 & 2 Tested on: winxp-sp3 - author: R3d-D3v!L ? TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ?...

Aqua Real v1 and 2 Local Crash PoC

Exploit for unknown platform in category dos / poc ================================== Aqua Real v1 and 2 Local Crash PoC ================================== Exploit Title: Local Crash PoC Author: R3d-D3V!L Vendor: http://aquarealscreensaver.com/ vuln-Version: Aqua Real 1 & 2 Tested on: winxp-sp3...

Aqua Real Screensaver - '.ar' Buffer Overflow

source: https://www.securityfocus.com/bid/40606/info Aqua Real Screensaver is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the contex...

Aqua Real Screensaver - .ar Buffer Overflow

Aqua Real Screensaver - .ar Buffer Overflow source: https://www.securityfocus.com/bid/40606/info Aqua Real Screensaver is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting this issue may allow remote...

CentOS 5 : gnome-screensaver (CESA-2008:0197)

An updated gnome-screensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gnome-screensaver is the GNOME project's official screen saver program. A flaw was...

GTK+ gdk_window_begin_implicit_paint()函数绕过屏保锁定漏洞

BUGTRAQ ID: 37411 GTK+是用于创建图形用户界面的多平台工具包。 GTK+的gdk/gdkwindow.c文件中的gdkwindowbeginimplicitpaint函数试图对不存在的外部窗口进行绘图，获得物理访问的本地用户连续五次输入错误口令就可以导致gnome-screensaver崩溃，从而绕过屏保锁定。 GTK GTK+ 2.18.4 厂商补丁： GTK --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news...

Fedora 12 : gtk2-2.18.5-3.fc12 (2009-12950)

This update fixes a crasher issue in gtk2 involving out of process windows. Side effects of the bug are sporadic panel crashes, and occasional crashes in gnome-screensaver when typing an invalid password. This update also addresses a crash in Inkscape when using the text tool. Note that Tenable...

Ubuntu USN-866-1 (gnome-screensaver)

The remote host is missing an update to gnome-screensaver announced via advisory USN-866-1. OpenVAS Vulnerability Test $Id: ubuntu8661.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8661.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-866-1 gnome-screensave...

Ubuntu: Security Advisory (USN-866-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-866-1: gnome-screensaver vulnerability

It was discovered that gnome-screensaver did not always re-enable itself after applications requested it to ignore idle timers. This may result in the screen not being automatically locked after the inactivity timeout is reached, permitting an attacker with physical access to gain access to an...

Ubuntu 7.10 / 8.04 LTS / 8.10 : compiz-fusion-plugins-main vulnerability (USN-688-1)

It was discovered that the Expo plugin for Compiz did not correctly restrict the screensaver window from being moved with the mouse. A local attacker could use the mouse to move the screensaver off the screen and gain access to the locked desktop session underneath. Default installs of Ubuntu wer...

Ubuntu 6.06 LTS / 7.10 : gnome-screensaver vulnerabilities (USN-669-1)

It was discovered that the notify feature in gnome-screensaver could let a local attacker read the clipboard contents of a locked session by using Ctrl-V. CVE-2007-6389 Alan Matsuoka discovered that gnome-screensaver did not properly handle network outages when using a remote authentication...

Mandriva Linux Security Advisory : gnome-screensaver (MDVSA-2008:135)

A vulnerability was found in gnome-screensaver 2.20.0 that could possibly allow a local user to read the clipboard contents and X selection data for a locked session by using CTRL-V CVE-2007-6389. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : gnome-screensaver (MDVSA-2008:132)

A vulnerability was found in gnome-screensaver prior to 2.22.1 when a remote authentication server was enabled. During a network outage, gnome-screensaver would crash upon an unlock attempt, allowing physically local users to gain access to locked sessions CVE-2008-0887. The updated packages have...

Mandriva Update for gnome-screensaver MDVSA-2008:135 (gnome-screensaver)

Check for the Version of gnome-screensaver OpenVAS Vulnerability Test Mandriva Update for gnome-screensaver MDVSA-2008:135 gnome-screensaver Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for gnome-screensaver MDVSA-2008:135 (gnome-screensaver)

Check for the Version of gnome-screensaver OpenVAS Vulnerability Test Mandriva Update for gnome-screensaver MDVSA-2008:135 gnome-screensaver Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for gnome-screensaver MDVSA-2008:132 (gnome-screensaver)

Check for the Version of gnome-screensaver OpenVAS Vulnerability Test Mandriva Update for gnome-screensaver MDVSA-2008:132 gnome-screensaver Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Ubuntu Update for gnome-screensaver vulnerability USN-537-1

Ubuntu Update for Linux kernel vulnerabilities USN-537-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5371.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for gnome-screensaver vulnerability USN-537-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-537-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...