CVE-2010-0732

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2010-0732
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.

6.2 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:H/Au:N/C:C/I:C/A:C

Exploitability : 1.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity HIGH

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news Vendor Advisory
http://git.gnome.org/browse/gnome-screensaver/commit/?h=gnome-2-28&id=98f8a22412cf388217fd5b88915eadd274d68520 Vendor Advisory
http://git.gnome.org/browse/gnome-screensaver/commit/?id=ab08cc93f2dc6223c8c00bfa1ca4f2d89069dbe0 Patch
http://git.gnome.org/browse/gtk+/commit/?id=0748cf563d0d0d03001a62589f13be16a8ec06c1 Patch
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html Third Party Advisory
http://secunia.com/advisories/39317 Broken Link
http://www.heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:109 Broken Link
http://www.openwall.com/lists/oss-security/2010/02/12/1 Mailing List
http://www.openwall.com/lists/oss-security/2010/03/05/2 Mailing List Patch
http://www.openwall.com/lists/oss-security/2010/03/16/9 Mailing List
http://www.securityfocus.com/bid/38211 Third Party Advisory VDB Entry
https://bugs.edge.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/446395 Third Party Advisory
https://bugzilla.gnome.org/show_bug.cgi?id=598476 Issue Tracking Patch
https://bugzilla.redhat.com/show_bug.cgi?id=565527 Issue Tracking Patch
http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news Vendor Advisory
http://git.gnome.org/browse/gnome-screensaver/commit/?h=gnome-2-28&id=98f8a22412cf388217fd5b88915eadd274d68520 Vendor Advisory
http://git.gnome.org/browse/gnome-screensaver/commit/?id=ab08cc93f2dc6223c8c00bfa1ca4f2d89069dbe0 Patch
http://git.gnome.org/browse/gtk+/commit/?id=0748cf563d0d0d03001a62589f13be16a8ec06c1 Patch
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html Third Party Advisory
http://secunia.com/advisories/39317 Broken Link
http://www.heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:109 Broken Link
http://www.openwall.com/lists/oss-security/2010/02/12/1 Mailing List
http://www.openwall.com/lists/oss-security/2010/03/05/2 Mailing List Patch
http://www.openwall.com/lists/oss-security/2010/03/16/9 Mailing List
http://www.securityfocus.com/bid/38211 Third Party Advisory VDB Entry
https://bugs.edge.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/446395 Third Party Advisory
https://bugzilla.gnome.org/show_bug.cgi?id=598476 Issue Tracking Patch
https://bugzilla.redhat.com/show_bug.cgi?id=565527 Issue Tracking Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:gnome:screensaver:*:*:*:*:*:*:*:*
History

21 Nov 2024, 01:12

Type Values Removed Values Added
References () http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news - Vendor Advisory () http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news - Vendor Advisory
References () http://git.gnome.org/browse/gnome-screensaver/commit/?h=gnome-2-28&id=98f8a22412cf388217fd5b88915eadd274d68520 - Vendor Advisory () http://git.gnome.org/browse/gnome-screensaver/commit/?h=gnome-2-28&id=98f8a22412cf388217fd5b88915eadd274d68520 - Vendor Advisory
References () http://git.gnome.org/browse/gnome-screensaver/commit/?id=ab08cc93f2dc6223c8c00bfa1ca4f2d89069dbe0 - Patch () http://git.gnome.org/browse/gnome-screensaver/commit/?id=ab08cc93f2dc6223c8c00bfa1ca4f2d89069dbe0 - Patch
References () http://git.gnome.org/browse/gtk+/commit/?id=0748cf563d0d0d03001a62589f13be16a8ec06c1 - Patch () http://git.gnome.org/browse/gtk+/commit/?id=0748cf563d0d0d03001a62589f13be16a8ec06c1 - Patch
References () http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html - Third Party Advisory
References () http://secunia.com/advisories/39317 - Broken Link () http://secunia.com/advisories/39317 - Broken Link
References () http://www.heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html - Third Party Advisory () http://www.heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html - Third Party Advisory
References () http://www.mandriva.com/security/advisories?name=MDVSA-2010:109 - Broken Link () http://www.mandriva.com/security/advisories?name=MDVSA-2010:109 - Broken Link
References () http://www.openwall.com/lists/oss-security/2010/02/12/1 - Mailing List () http://www.openwall.com/lists/oss-security/2010/02/12/1 - Mailing List
References () http://www.openwall.com/lists/oss-security/2010/03/05/2 - Mailing List, Patch () http://www.openwall.com/lists/oss-security/2010/03/05/2 - Mailing List, Patch
References () http://www.openwall.com/lists/oss-security/2010/03/16/9 - Mailing List () http://www.openwall.com/lists/oss-security/2010/03/16/9 - Mailing List
References () http://www.securityfocus.com/bid/38211 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/38211 - Third Party Advisory, VDB Entry
References () https://bugs.edge.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/446395 - Third Party Advisory () https://bugs.edge.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/446395 - Third Party Advisory
References () https://bugzilla.gnome.org/show_bug.cgi?id=598476 - Issue Tracking, Patch () https://bugzilla.gnome.org/show_bug.cgi?id=598476 - Issue Tracking, Patch
References () https://bugzilla.redhat.com/show_bug.cgi?id=565527 - Issue Tracking, Patch () https://bugzilla.redhat.com/show_bug.cgi?id=565527 - Issue Tracking, Patch

03 Aug 2023, 17:17

Type Values Removed Values Added
CPE cpe:2.3:a:gtk:gtk\+:*:*:*:*:*:*:*:* cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*
References (CONFIRM) https://bugzilla.gnome.org/show_bug.cgi?id=598476 - Patch (CONFIRM) https://bugzilla.gnome.org/show_bug.cgi?id=598476 - Issue Tracking, Patch
References (MISC) http://www.heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html - (MISC) http://www.heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html - Third Party Advisory
References (MLIST) http://www.openwall.com/lists/oss-security/2010/03/05/2 - Patch (MLIST) http://www.openwall.com/lists/oss-security/2010/03/05/2 - Mailing List, Patch
References (CONFIRM) http://git.gnome.org/browse/gnome-screensaver/commit/?h=gnome-2-28&id=98f8a22412cf388217fd5b88915eadd274d68520 - (CONFIRM) http://git.gnome.org/browse/gnome-screensaver/commit/?h=gnome-2-28&id=98f8a22412cf388217fd5b88915eadd274d68520 - Vendor Advisory
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html - (SUSE) http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html - Third Party Advisory
References (CONFIRM) http://git.gnome.org/browse/gtk+/commit/?id=0748cf563d0d0d03001a62589f13be16a8ec06c1 - (CONFIRM) http://git.gnome.org/browse/gtk+/commit/?id=0748cf563d0d0d03001a62589f13be16a8ec06c1 - Patch
References (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDVSA-2010:109 - (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDVSA-2010:109 - Broken Link
References (BID) http://www.securityfocus.com/bid/38211 - (BID) http://www.securityfocus.com/bid/38211 - Third Party Advisory, VDB Entry
References (SECUNIA) http://secunia.com/advisories/39317 - (SECUNIA) http://secunia.com/advisories/39317 - Broken Link
References (MLIST) http://www.openwall.com/lists/oss-security/2010/02/12/1 - (MLIST) http://www.openwall.com/lists/oss-security/2010/02/12/1 - Mailing List
References (MLIST) http://www.openwall.com/lists/oss-security/2010/03/16/9 - (MLIST) http://www.openwall.com/lists/oss-security/2010/03/16/9 - Mailing List
References (CONFIRM) http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news - (CONFIRM) http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news - Vendor Advisory
References (CONFIRM) https://bugzilla.redhat.com/show_bug.cgi?id=565527 - Patch (CONFIRM) https://bugzilla.redhat.com/show_bug.cgi?id=565527 - Issue Tracking, Patch
References (CONFIRM) https://bugs.edge.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/446395 - (CONFIRM) https://bugs.edge.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/446395 - Third Party Advisory
First Time Gnome gtk
Information

Published : 2010-03-19 19:30

Updated : 2024-11-21 01:12

NVD link : CVE-2010-0732

Mitre link : CVE-2010-0732

CVE.ORG link : CVE-2010-0732

JSON object : View

Products Affected

gnome

  • screensaver
  • gtk
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024