ubuntu · CVE-2010-0732

Quick triage

Priority: medium Published: 2010-03-19 19:30:00 UTC Updated: 2024-07-24 15:57:39 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2010-0732 medium priority: Ubuntu including 1 source packages (gtk+2.0), 6 status rows across 6 suites (dapper, hardy, intrepid, jaunty, karmic, upstream): not-affected 4, ignored 1, released 1.

Description:

gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.

cvelogic Threat Intelligence