CVE-2010-0285

Publication date 24 February 2010

Last updated 24 July 2024

Ubuntu priority

gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
gnome-screensaver	9.10 karmic	Fixed 2.28.0-0ubuntu3.5
	9.04 jaunty	Fixed 2.24.0-0ubuntu6.1
	8.10 intrepid	Fixed 2.24.0-0ubuntu2.1
	8.04 LTS hardy	Not affected
	6.06 LTS dapper	Ignored

Notes

mdeslaur

code doesn't seem present in 2.22.2, but have not tested. code seems to have been introduced in 2.23.3

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
gnome-screensaver	Upstream: ?id=2f5

References

Related Ubuntu Security Notices (USN)

USN-907-1
gnome-screensaver vulnerabilities
8 March 2010

Other references

https://www.cve.org/CVERecord?id=CVE-2010-0285