CVE-2010-0732
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs...
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.
Exploit likelihood
What each source reports
NVD Score used
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.
- Record
CVE-2010-0732- CVSS 2.0
- 6.2 Medium
AV:L/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE List No score
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.
- Record
CVE-2010-0732- Updated
- 2026-11-02
EUVDEUVD-2010-0758 No score
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.
- Record
EUVD-2010-0758- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xm6w-hhcm-7v7g No score
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs...
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.
- Record
GHSA-xm6w-hhcm-7v7g- Weakness
- CWE-362
- Updated
- 2026-11-02
OSV No score
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.
- Record
CVE-2010-0732- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-0732 No score
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.
- Record
DEBIAN-CVE-2010-0732- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0732 is a medium vulnerability (CVSS 6.2) in Gnome Gtk, published March 19, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 22nd percentile. Fixed in gtk+2.0 2.18.5-1.
References
secunia.com/advisories/39317
openwall.com/lists/oss-security/2010/02/12/1
securityfocus.com/bid/38211
bugzilla.redhat.com/show_bug.cgi?id=565527
git.gnome.org/browse/gnome-screensaver/commit?id=ab08cc93f2dc6223c8c00bfa1ca4f2d89069dbe0
Show 13 moreShow less
lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news
mandriva.com/security/advisories?name=MDVSA-2010:109
bugs.edge.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/446395
bugzilla.gnome.org/show_bug.cgi?id=598476
heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html
nvd.nist.gov/vuln/detail/CVE-2010-0732
access.redhat.com/security/cve/CVE-2010-0732
github.com/advisories/GHSA-xm6w-hhcm-7v7g
security-tracker.debian.org/tracker/CVE-2010-0732