PT-2012-4725 · Gnome · Gnome-Screensaver

Benedict Etzel + 9 · Published 2012-08-07 · Updated 2012-08-08 · CVE-2012-3452

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions gnome-screensaver versions 3.4.x through 3.4.3 gnome-screensaver versions 3.5.x through 3.5.3

Description The issue allows physically proximate attackers to bypass screen locking and access an unattended workstation when multiple screens are used, as only the screen with the active focus is locked.

Recommendations For gnome-screensaver versions 3.4.x through 3.4.3, update to version 3.4.4 or later. For gnome-screensaver versions 3.5.x through 3.5.3, update to version 3.5.4 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-3452

Affected Products

Gnome-Screensaver

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-3452 · Security Note
• http://openwall.com/lists/oss-security/2012/08/03/5 · Note
• https://bugzilla.gnome.org/show_bug.cgi?id=679441 · Note
• http://openwall.com/lists/oss-security/2012/08/03/3 · Note