NVD

Id
11978  
Name
CVE-2010-0422  
Description
gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, a related issue to CVE-2010-0414.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:C/A:N)  
Pub Date
2017-01-18  
Published
2010-02-24  
Modified Date
2010-03-22  
Seq
2010-0422  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66012 11978 CVE-2010-0422 http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.3.news  View
66013 11978 CVE-2010-0422 http://git.gnome.org/browse/gnome-screensaver/commit/?id=271ae93d7b140b8ba40d77f9e4ce894e5fd1b554  View
66014 11978 CVE-2010-0422 http://git.gnome.org/browse/gnome-screensaver/commit/?id=d4dcbd65a2df3c093c4e3a74bbbc75383eb9eadb  View
66015 11978 CVE-2010-0422 http://git.gnome.org/browse/gnome-screensaver/commit/?id=f93a22c175090cf02e80bc3ee676b53f1251f685  View
66016 11978 CVE-2010-0422 FEDORA-2010-1855  View
66017 11978 CVE-2010-0422 [oss-security] 20100212 Re: gnome-screensaver vulnerability (CVE-2010-0414)  View
66018 11978 CVE-2010-0422 38248  View
66019 11978 CVE-2010-0422 gnome-screensaver-monitor-sec-bypass(56364)  View
66020 11978 CVE-2010-0422 https://bugzilla.gnome.org/show_bug.cgi?id=609789  View
66021 11978 CVE-2010-0422 https://bugzilla.redhat.com/show_bug.cgi?id=564464  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38023 JVNDB-2010-003808 gnome-screensaver における画面がロックされている無人のワークステーションにアクセスされる脆弱性 gnome-screensaver は、画面ロックおよびモニター数変更に伴うダイアログのロック解除の状態を適切に同期しないため、画面がロックされている無人のワークステーションにアクセスされる脆弱性が存在します。 CVE-2010-0422 43002 CVE-2010-0422 11978 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003808.html 2010-02-12 2012-06-26 View