PT-2010-2479 · Gnome+1 · Gnome-Screensaver+1

Chris Coulson + 1 · Published 2010-03-19 · Updated 2023-08-03 · CVE-2010-0732

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GTK+ versions prior to 2.18.5 gnome-screensaver versions prior to 2.28.1

Description The issue allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times, due to implicit paints on windows of type GDK WINDOW FOREIGN, which triggers an X error in certain circumstances.

Recommendations For GTK+ versions prior to 2.18.5, update to version 2.18.5 or later. For gnome-screensaver versions prior to 2.28.1, update to version 2.28.1 or later.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2010-0732

Affected Products

Gtk+

Gnome-Screensaver

References · 20

• http://git.gnome.org/browse/gtk+/commit/?id=0748cf563d0d0d03001a62589f13be16a8ec06c1 · Patch
• http://mandriva.com/security/advisories?name=MDVSA-2010:109 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0732 · Security Note
• http://git.gnome.org/browse/gnome-screensaver/commit/?h=gnome-2-28&id=98f8a22412cf388217fd5b88915eadd274d68520 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=565527 · Patch
• http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-0732 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-0732 · Vendor Advisory
• http://openwall.com/lists/oss-security/2010/03/05/2 · Patch
• http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news · Vendor Advisory
• https://bugzilla.gnome.org/show_bug.cgi?id=598476 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-0732 · Vendor Advisory
• http://git.gnome.org/browse/gnome-screensaver/commit/?id=ab08cc93f2dc6223c8c00bfa1ca4f2d89069dbe0 · Patch
• https://t.me/cvenotify/55723 · Telegram Post
• http://heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html · Note