CVE-2010-0732

GTK+ < 2.18.5 and gnome-screensaver < 2.28.1 - Race Condition via Implicit Window Paints

Title source: llm
STIX 2.1

Description

gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.

References (15)

Core 15
Core References
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39317
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/02/12/1
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/03/16/9
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/38211
Issue Tracking, Patch x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=565527
Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2010:109
Issue Tracking, Patch x_refsource_confirm
https://bugzilla.gnome.org/show_bug.cgi?id=598476
Mailing List, Patch mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/03/05/2

Scores

EPSS 0.0004
EPSS Percentile 12.6%

Details

CWE
CWE-362
Status published
Products (2)
gnome/gtk < 2.18.5
gnome/screensaver < 2.28.1
Published Mar 19, 2010
Tracked Since Feb 18, 2026