PT-2009-5428 · X.Org Foundation+1 · X11+3

Publicado 2009-09-08 · Atualizado 2011-12-21 · CVE-2009-3100

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:L/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: xscreensaver versions in Sun Solaris 9 and 10 xscreensaver versions in OpenSolaris snv 109 through snv 122 xscreensaver version in X11 6.4.1 on Solaris 8

Description: The issue is related to improper handling of Accessibility support, which can cause a system hang when the screen is locked and an attempt is made to launch an Accessibility pop-up window. This is due to a regression in certain Solaris and OpenSolaris patches.

Recommendations: For xscreensaver in Sun Solaris 9 and 10, consider disabling Accessibility support as a temporary workaround until a patch is available. For xscreensaver in OpenSolaris snv 109 through snv 122, restrict access to the screen locking feature to minimize the risk of exploitation. For xscreensaver in X11 6.4.1 on Solaris 8, avoid using the Accessibility pop-up window feature until the issue is resolved.

Correção

Identificadores relacionados

CVE-2009-3100

Produtos afetados

Opensolaris

Solaris

X11

Xscreensaver

Referências · 3

• http://sunsolve.sun.com/search/document.do?assetkey=1-66-266469-1 · Aviso do Fabricante
• http://bugs.opensolaris.org/view_bug.do?bug_id=6839026 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-3100 · Nota de Segurança