Mate · Mate-Screensaver · CVE-2018-20681
Name of the Vulnerable Software and Affected Versions:
mate-screensaver versions prior to 1.20.2
Description:
The issue allows physically proximate attackers to view screen content and possibly control applications when the screensaver is locked. This can be achieved by unplugging and re-plugging or power-cycling external output devices, such as those connected via HDMI, VGA, or DVI. In certain scenarios, the attacker may also be able to execute applications, for example, by using a mouse to click on items.
Recommendations:
For mate-screensaver versions prior to 1.20.2, update to version 1.20.2 or later to resolve the issue.