{"id":"CVE-2007-3920","aliases":["DEBIAN-CVE-2007-3920","DTSA-75-1","EUVD-2007-3904","GHSA-pq79-5jg4-62p2","RHSA-2008:0485"],"status":"published","title":"GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input...","description":"GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.","severity":{"version":"2.0","score":6.2,"vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00356,"percentile":0.29605,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2007-10-29T21:00:00Z","modified":"2026-10-21T17:47:33Z","fixes":[{"ecosystem":"Debian:12","package":"gnome-screensaver","fixed_in":["2.20.0-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnome-screensaver","fixed_in":["2.20.0-1.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"xorg-server","fixed_in":["2:1.4.1~git20080118-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xorg-server","fixed_in":["2:1.4.1~git20080118-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xorg-server","fixed_in":["2:1.4.1~git20080118-1"],"sources":["osv"]},{"ecosystem":"Debian:5.0","package":"gnome-screensaver","fixed_in":["2.18.2-1+lenny1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"compiz","fixed_in":["0:0.0.13-0.37.20060817git.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"compiz-debuginfo","fixed_in":["0:0.0.13-0.37.20060817git.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"compiz-devel","fixed_in":["0:0.0.13-0.37.20060817git.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"compiz","fixed_in":["0:0.0.13-0.37.20060817git.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"compiz-debuginfo","fixed_in":["0:0.0.13-0.37.20060817git.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_productivity:5","package":"compiz","fixed_in":["0:0.0.13-0.37.20060817git.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_productivity:5","package":"compiz-debuginfo","fixed_in":["0:0.0.13-0.37.20060817git.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_productivity:5","package":"compiz-devel","fixed_in":["0:0.0.13-0.37.20060817git.el5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gnome-screensaver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gnome-screensaver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-1.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.4.1~git20080118-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.4.1~git20080118-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.4.1~git20080118-1"}]}]},{"source":"osv","ecosystem":"Debian:5.0","package":"gnome-screensaver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.2-1+lenny1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"compiz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.13-0.37.20060817git.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"compiz-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.13-0.37.20060817git.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"compiz-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.13-0.37.20060817git.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"compiz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.13-0.37.20060817git.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"compiz-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.13-0.37.20060817git.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_productivity:5","package":"compiz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.13-0.37.20060817git.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_productivity:5","package":"compiz-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.13-0.37.20060817git.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_productivity:5","package":"compiz-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.13-0.37.20060817git.el5"}]}]}],"products":[{"vendor":"compiz","product":"compiz"},{"vendor":"gnome","product":"screensaver"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=363061","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10192","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00841.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/usn-537-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=357071","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://secunia.com/advisories/30715","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37410","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/usn-537-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Patch","fix"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00811.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/26188","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch","fix"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0485.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://secunia.com/advisories/27381","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://secunia.com/advisories/28627","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/30329","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-3920","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pq79-5jg4-62p2"},{"url":"https://security-tracker.debian.org/tracker/CVE-2007-3920","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2008:0485","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=350271","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0485.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-3920","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-3920","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2007-3920","description":"GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.","status":"published","published":"2007-10-29T21:00:00Z","modified":"2024-08-07T14:37:05.347Z","updated_at":"2026-11-02T13:32:34.372976Z"}],"euvd":[{"id":"EUVD-2007-3904","description":"GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.","status":"published","published":"2007-10-29T21:00:00Z","modified":"2024-08-07T14:37:05Z","updated_at":"2026-11-03T01:16:24.023061Z"}],"ghsa":[{"id":"GHSA-pq79-5jg4-62p2","title":"GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input...","description":"GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.","status":"published","published":"2022-05-01T18:18:35Z","modified":"2023-01-31T05:04:07Z","updated_at":"2026-11-02T14:48:36.723893Z"}],"nvd":[{"id":"CVE-2007-3920","description":"GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.","status":"published","published":"2007-10-29T21:46:00Z","modified":"2026-06-16T22:43:03.527Z","cvss":[{"version":"2.0","score":6.2,"vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:22.203764Z"}],"osv":[{"id":"CVE-2007-3920","description":"GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.","status":"published","published":"2007-10-29T21:46:00Z","modified":"2026-04-10T03:38:59.420198Z","updated_at":"2026-11-02T15:43:56.865964Z"},{"id":"DEBIAN-CVE-2007-3920","description":"GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.","status":"published","published":"2007-10-29T21:46:00Z","modified":"2026-10-21T17:47:33.584775555Z","updated_at":"2026-11-02T15:45:23.411908Z"},{"id":"DTSA-75-1","title":"gnome-screensaver - authentication bypass","status":"published","published":"2007-11-01T00:00:00Z","modified":"2026-03-09T01:01:03.347499Z","updated_at":"2026-11-02T15:46:18.716547Z"},{"id":"RHSA-2008:0485","title":"Red Hat Security Advisory: compiz security update","status":"published","published":"2024-09-15T17:19:00Z","modified":"2026-06-26T12:18:26.576374033Z","updated_at":"2026-11-02T15:52:59.70892Z"}]}}