CVE-2009-2711: Sun Opensolaris

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276.

Affected products

• Sun Opensolaris: version snv_01 only; version snv_02 only; version snv_03 only; version snv_04 only; version snv_05 only; version snv_06 only; …
• Sun Solaris: version 9.0 only; version 10 only; version 8.0 only
• X.org x11: version 6.4.1 only

Published 2009-08-07. Last modified 2026-06-16.