CVE-2009-4642
gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle...
gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended.
Exploit likelihood
What each source reports
NVD Score used
gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended.
- Record
CVE-2009-4642- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended.
- Record
CVE-2009-4642- Updated
- 2026-11-02
EUVDEUVD-2009-4607 No score
gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended.
- Record
EUVD-2009-4607- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fv9m-992g-7qrw No score
gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle...
gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended.
- Record
GHSA-fv9m-992g-7qrw- Updated
- 2026-11-02
OSV No score
gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended.
- Record
CVE-2009-4642- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-4642 No score
gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended.
- Record
DEBIAN-CVE-2009-4642- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gnome-screensaverDebian:12 |
before 2.26.1-2 | 2.26.1-2 |
gnome-screensaverDebian:13 |
before 2.26.1-2 | 2.26.1-2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-4642 is a high vulnerability (CVSS 7.2) in Gnome Screensaver, published February 11, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in gnome-screensaver 2.26.1-2.
References
bugzilla.xfce.org/show_bug.cgi?id=5927
bugs.debian.org/cgi-bin/bugreport.cgi?bug=536381
launchpad.net/bugs/493573
bugzilla.gnome.org/show_bug.cgi?id=592093
nvd.nist.gov/vuln/detail/CVE-2009-4642
github.com/advisories/GHSA-fv9m-992g-7qrw
security-tracker.debian.org/tracker/CVE-2009-4642