Lucene search

K
ubuntuUbuntuUSN-537-2
HistoryNov 02, 2007 - 12:00 a.m.

Compiz vulnerability

2007-11-0200:00:00
ubuntu.com
28

6.3 Medium

AI Score

Confidence

Low

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

67.9%

Releases

  • Ubuntu 7.10

Packages

  • compiz -

Details

USN-537-1 fixed vulnerabilities in gnome-screensaver. The fixes were
incomplete, and only reduced the scope of the vulnerability, without
fully solving it. This update fixes related problems in compiz.

Original advisory details:

Jens Askengren discovered that gnome-screensaver became confused when
running under Compiz, and could lose keyboard lock focus. A local attacker
could exploit this to bypass the user’s locked screen saver.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.10noarchcompiz-core< 1:0.6.0+git20071008-0ubuntu1.1UNKNOWN
Ubuntu7.10noarchcompiz-dev< 1:0.6.0+git20071008-0ubuntu1.1UNKNOWN
Ubuntu7.10noarchcompiz-gnome< 1:0.6.0+git20071008-0ubuntu1.1UNKNOWN
Ubuntu7.10noarchcompiz-kde< 1:0.6.0+git20071008-0ubuntu1.1UNKNOWN
Ubuntu7.10noarchcompiz-plugins< 1:0.6.0+git20071008-0ubuntu1.1UNKNOWN
Ubuntu7.10noarchlibdecoration0< 1:0.6.0+git20071008-0ubuntu1.1UNKNOWN
Ubuntu7.10noarchlibdecoration0-dev< 1:0.6.0+git20071008-0ubuntu1.1UNKNOWN

6.3 Medium

AI Score

Confidence

Low

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

67.9%