Gnome Screensaver vulnerabilities

11 CVEs affecting Gnome Screensaver, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-3452, published 2012-08-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-0887, published 2008-04-06. Medium severity, CVSS 4.7. EPSS: 1.3% chance of exploitation in the next 30 days. gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate attackers to gain access to…
CVE-2010-0414, published 2010-02-11. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then…
CVE-2007-6389, published 2007-12-17. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboard contents and X selection data for a locked session by using ctrl-V.
CVE-2009-4641, published 2010-02-11. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to…
CVE-2010-0422, published 2010-02-24. Medium severity, CVSS 4.0. EPSS: 0.4% chance of exploitation in the next 30 days. gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows…
CVE-2007-3920, published 2007-10-29. Medium severity, CVSS 6.2. EPSS: 0.4% chance of exploitation in the next 30 days. GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an…
CVE-2012-3452, published 2012-08-07. Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days. gnome-screensaver 3.4.x before 3.4.4 and 3.5.x before 3.5.4, when multiple screens are used, only locks the screen with the active focus, which allows physically proximate attackers to bypass screen…
CVE-2009-4642, published 2010-02-11. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate…
CVE-2006-1335, published 2006-03-21. Low severity, CVSS 3.7. EPSS: 0.3% chance of exploitation in the next 30 days. gnome screensaver before 2.14, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs enabled, allows attackers with physical access to cause the screensaver to crash and…
CVE-2010-0285, published 2010-02-24. Medium severity, CVSS 5.6. EPSS: 0.3% chance of exploitation in the next 30 days. gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an…

Latest

CVE-2010-0732, published 2010-03-19. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances…