CVE-2010-0422: gnome screensaver
Vulnerability summary
CVE-2010-0422 is a medium (CVSS 4.0) vulnerability in gnome screensaver. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 27.9% of scored vulnerabilities.
Timeline
- 24-02-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, a related issue to CVE-2010-0414.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.36%
Chance of exploitation in the next 30 days
Percentile
28%
Versus all other CVEs
30-day change
0.00 pp
From 0.36% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- gnome-screensaver< 2.28.3-1
Gnome1 product
- screensaver2.28.0 | 2.28.1 | 2.28.2
2 vendors · 2 products
References
13 links- bugzilla.redhat.com/show_bug.cgi?id=564464X Refsource CONFIRM
- bugzilla.gnome.org/show_bug.cgi?id=609789X Refsource CONFIRM
- lists.fedoraproject.org/pipermail/package-announce/2010-February/035115.htmlVendor AdvisoryX Refsource FEDORA