CVE-2010-0414: Undefined Security Weakness

gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor...

Ubuntu 9.10 : gnome-screensaver vulnerability (USN-898-1)

It was discovered that gnome-screensaver did not correctly handle monitor hotplugging. An attacker with physical access could cause gnome-screensaver to crash and gain access to the locked session. Note that Tenable Network Security has extracted the preceding description block directly from the...

USN-898-1: gnome-screensaver vulnerability

It was discovered that gnome-screensaver did not correctly handle monitor hotplugging. An attacker with physical access could cause gnome-screensaver to crash and gain access to the locked session...

CVE-2010-0414

gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor...

[SECURITY] Fedora 12 Update: gnome-screensaver-2.28.2-1.fc12

gnome-screensaver is a screen saver and locker that aims to have simple, sane, secure defaults and be well integrated with the desktop...

gnome-screensaver -- Multiple monitor hotplug issues

Ray Strode reports: Under certain circumstances it is possible to circumvent the security of screen locking functionality of gnome-screensaver by changing the systems physical monitor configuration. gnome-screensaver can lose its keyboard grab when locked, exposing the system to intrusion by addi...

Aqua Real v1 and 2 Local Crash PoC

Exploit for unknown platform in category dos / poc ================================== Aqua Real v1 and 2 Local Crash PoC ================================== Exploit Title: Local Crash PoC Author: R3d-D3V!L Vendor: http://aquarealscreensaver.com/ vuln-Version: Aqua Real 1 & 2 Tested on: winxp-sp3...

Aqua Real Screensaver - .ar Buffer Overflow

Aqua Real Screensaver - .ar Buffer Overflow source: https://www.securityfocus.com/bid/40606/info Aqua Real Screensaver is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting this issue may allow remote...

Aqua Real Local Crash

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Exploit Title: Local Crash PoC Author: R3d-D3V!L Software Link: http://aquarealscreensaver.com/ vuln-Version: Aqua Real 1 & 2 Tested on: winxp-sp3 - author: R3d-D3v!L ? TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ?...

Aqua Real Screensaver - '.ar' Buffer Overflow

source: https://www.securityfocus.com/bid/40606/info Aqua Real Screensaver is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the contex...

CentOS 5 : gnome-screensaver (CESA-2008:0197)

An updated gnome-screensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gnome-screensaver is the GNOME project's official screen saver program. A flaw was...

GTK+ gdk_window_begin_implicit_paint()函数绕过屏保锁定漏洞

BUGTRAQ ID: 37411 GTK+是用于创建图形用户界面的多平台工具包。 GTK+的gdk/gdkwindow.c文件中的gdkwindowbeginimplicitpaint函数试图对不存在的外部窗口进行绘图，获得物理访问的本地用户连续五次输入错误口令就可以导致gnome-screensaver崩溃，从而绕过屏保锁定。 GTK GTK+ 2.18.4 厂商补丁： GTK --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news...

Fedora 12 : gtk2-2.18.5-3.fc12 (2009-12950)

This update fixes a crasher issue in gtk2 involving out of process windows. Side effects of the bug are sporadic panel crashes, and occasional crashes in gnome-screensaver when typing an invalid password. This update also addresses a crash in Inkscape when using the text tool. Note that Tenable...

Ubuntu USN-866-1 (gnome-screensaver)

The remote host is missing an update to gnome-screensaver announced via advisory USN-866-1. OpenVAS Vulnerability Test $Id: ubuntu8661.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8661.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-866-1 gnome-screensave...

Ubuntu: Security Advisory (USN-866-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-866-1: gnome-screensaver vulnerability

It was discovered that gnome-screensaver did not always re-enable itself after applications requested it to ignore idle timers. This may result in the screen not being automatically locked after the inactivity timeout is reached, permitting an attacker with physical access to gain access to an...

CVE-2009-3851: Undefined Security Weakness

Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver application, which makes it easier for physically proximate attackers to access an unattended workstation for which the intended screen locking did not occur, related to the...

CVE-2009-3432: Undefined Security Weakness

Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events...

Mandriva Linux Security Advisory : gnome-screensaver (MDVSA-2008:135)

A vulnerability was found in gnome-screensaver 2.20.0 that could possibly allow a local user to read the clipboard contents and X selection data for a locked session by using CTRL-V CVE-2007-6389. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : gnome-screensaver (MDVSA-2008:132)

A vulnerability was found in gnome-screensaver prior to 2.22.1 when a remote authentication server was enabled. During a network outage, gnome-screensaver would crash upon an unlock attempt, allowing physically local users to gain access to locked sessions CVE-2008-0887. The updated packages have...