Vulnerability Details CVE-2010-0414
gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.6%
CVSS Severity
CVSS v2 Score 7.2
References
- http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.2.news
- http://git.gnome.org/browse/gnome-screensaver/commit/?id=a5f66339be6719c2b8fc478a1d5fc6545297d950
- http://git.gnome.org/browse/gnome-screensaver/commit/?id=dcca89b7ab6e1220815af38da246434b2e13fd9f
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034904.html
- http://secunia.com/advisories/38468
- http://secunia.com/advisories/38532
- http://secunia.com/advisories/38534
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:040
- http://www.osvdb.org/62219
- http://www.securityfocus.com/bid/38149
- http://www.ubuntu.com/usn/USN-898-1
- https://bugzilla.gnome.org/show_bug.cgi?id=609337
- https://bugzilla.redhat.com/show_bug.cgi?id=562217
- http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.2.news
- http://git.gnome.org/browse/gnome-screensaver/commit/?id=a5f66339be6719c2b8fc478a1d5fc6545297d950
- http://git.gnome.org/browse/gnome-screensaver/commit/?id=dcca89b7ab6e1220815af38da246434b2e13fd9f
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034904.html
- http://secunia.com/advisories/38468
- http://secunia.com/advisories/38532
- http://secunia.com/advisories/38534
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:040
- http://www.osvdb.org/62219
- http://www.securityfocus.com/bid/38149
- http://www.ubuntu.com/usn/USN-898-1
- https://bugzilla.gnome.org/show_bug.cgi?id=609337
- https://bugzilla.redhat.com/show_bug.cgi?id=562217
Products affected by CVE-2010-0414
-
cpe:2.3:a:gnome:screensaver:*
-
cpe:2.3:a:gnome:screensaver:2.13
-
cpe:2.3:a:gnome:screensaver:2.20
-
cpe:2.3:a:gnome:screensaver:2.20.0
-
cpe:2.3:a:gnome:screensaver:2.26.1
-
cpe:2.3:a:gnome:screensaver:2.28.0