CVE-2010-0285

Description

gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor.

Affected products

• GNOME / screensaver2.14.3 – 2.14.3
• GNOME / screensaver2.22.2 – 2.22.2
• GNOME / screensaver2.27 – 2.27
• GNOME / screensaver2.28.0 – 2.28.0
• GNOME / screensaver2.28.3 – 2.28.3

References

• MISChttps://bugzilla.gnome.org/show_bug.cgi?id=593616
• MISChttps://bugzilla.redhat.com/show_bug.cgi?id=557525
• MISChttp://git.gnome.org/browse/gnome-screensaver/commit/?id=2f597ea9f1f363277fd4dfc109fa41bbc6225aca
• VENDOR_ADVISORYhttp://security-tracker.debian.org/tracker/CVE-2010-0285
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/56366
• VENDOR_ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2011:093
• MISChttp://www.securityfocus.com/bid/38254