{"id":"CVE-2009-1276","aliases":["EUVD-2009-1274","GHSA-h96c-vv5w-hqpj"],"status":"published","title":"XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0...","description":"XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00373,"percentile":0.31568,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2009-04-09T15:00:00Z","modified":"2026-06-16T23:06:55Z","products":[{"vendor":"sun","product":"opensolaris"},{"vendor":"sun","product":"solaris"}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-22-1","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0978","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://securitytracker.com/id?1022009","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/34421","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-255308-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1276"},{"url":"https://github.com/advisories/GHSA-h96c-vv5w-hqpj"}],"sources":{"cve":[{"id":"CVE-2009-1276","description":"XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.","status":"published","published":"2009-04-09T15:00:00Z","modified":"2024-08-07T05:04:49.426Z","updated_at":"2026-11-02T14:33:25.126493Z"}],"euvd":[{"id":"EUVD-2009-1274","description":"XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.","status":"published","published":"2009-04-09T15:00:00Z","modified":"2024-08-07T05:04:49Z","updated_at":"2026-11-03T01:39:22.412498Z"}],"ghsa":[{"id":"GHSA-h96c-vv5w-hqpj","title":"XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0...","description":"XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.","status":"published","published":"2022-05-02T03:23:17Z","modified":"2023-01-31T05:07:04Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:49:08.811767Z"}],"nvd":[{"id":"CVE-2009-1276","description":"XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.","status":"published","published":"2009-04-09T15:08:35.843Z","modified":"2026-06-16T23:06:55.55Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:01:34.44527Z"}]}}