CVE-2009-1276: Sun Opensolaris

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.

Affected products

• Sun Opensolaris: up to and including snv_108; version snv_01 only; version snv_02 only; version snv_03 only; version snv_04 only; version snv_05 only; …
• Sun Solaris: version 8 only; version 9 only; version 10 only

Published 2009-04-09. Last modified 2026-06-16.