PT-2012-4725 · Gnome · Gnome-Screensaver

Benedict Etzel + 9 · Publicado 2012-08-07 · Atualizado 2012-08-08 · CVE-2012-3452

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions gnome-screensaver versions 3.4.x through 3.4.3 gnome-screensaver versions 3.5.x through 3.5.3

Description The issue allows physically proximate attackers to bypass screen locking and access an unattended workstation when multiple screens are used, as only the screen with the active focus is locked.

Recommendations For gnome-screensaver versions 3.4.x through 3.4.3, update to version 3.4.4 or later. For gnome-screensaver versions 3.5.x through 3.5.3, update to version 3.5.4 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-3452

Produtos afetados

Gnome-Screensaver

Referências · 4

• http://openwall.com/lists/oss-security/2012/08/03/5 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-3452 · Nota de Segurança
• https://bugzilla.gnome.org/show_bug.cgi?id=679441 · Nota
• http://openwall.com/lists/oss-security/2012/08/03/3 · Nota