{"id":"CVE-2010-0422","aliases":["DEBIAN-CVE-2010-0422","EUVD-2010-0453","GHSA-82c2-q9r7-c94r"],"status":"published","title":"gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking...","description":"gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, a related issue to CVE-2010-0414.","severity":{"version":"2.0","score":4,"vector":"AV:L/AC:H/Au:N/C:N/I:C/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00357,"percentile":0.29648,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2010-02-24T18:00:00Z","modified":"2026-10-23T17:47:35Z","fixes":[{"ecosystem":"Debian:12","package":"gnome-screensaver","fixed_in":["2.28.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnome-screensaver","fixed_in":["2.28.3-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gnome-screensaver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gnome-screensaver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.3-1"}]}]}],"products":[{"vendor":"gnome","product":"screensaver"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=564464","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=609789","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://marc.info/?l=oss-security\u0026m=126601292400764\u0026w=2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.3.news","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/56364","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035115.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://secunia.com/advisories/38565","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://git.gnome.org/browse/gnome-screensaver/commit/?id=d4dcbd65a2df3c093c4e3a74bbbc75383eb9eadb","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/38583","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://git.gnome.org/browse/gnome-screensaver/commit/?id=271ae93d7b140b8ba40d77f9e4ce894e5fd1b554","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/38248","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://git.gnome.org/browse/gnome-screensaver/commit/?id=f93a22c175090cf02e80bc3ee676b53f1251f685","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0422"},{"url":"https://github.com/advisories/GHSA-82c2-q9r7-c94r"},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-0422","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-0422","description":"gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, a related issue to CVE-2010-0414.","status":"published","published":"2010-02-24T18:00:00Z","modified":"2024-08-07T00:45:12.275Z","updated_at":"2026-11-02T14:33:29.582233Z"}],"euvd":[{"id":"EUVD-2010-0453","description":"gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, a related issue to CVE-2010-0414.","status":"published","published":"2010-02-24T18:00:00Z","modified":"2024-08-07T00:45:12Z","updated_at":"2026-11-03T01:39:45.195177Z"}],"ghsa":[{"id":"GHSA-82c2-q9r7-c94r","title":"gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking...","description":"gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, a related issue to CVE-2010-0414.","status":"published","published":"2022-05-02T06:12:37Z","modified":"2023-02-01T05:00:32Z","updated_at":"2026-11-02T14:49:33.374495Z"}],"nvd":[{"id":"CVE-2010-0422","description":"gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, a related issue to CVE-2010-0414.","status":"published","published":"2010-02-24T18:30:00.467Z","modified":"2026-06-16T23:16:08.187Z","cvss":[{"version":"2.0","score":4,"vector":"AV:L/AC:H/Au:N/C:N/I:C/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:40.249593Z"}],"osv":[{"id":"CVE-2010-0422","description":"gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, a related issue to CVE-2010-0414.","status":"published","published":"2010-02-24T18:30:00Z","modified":"2026-04-10T03:41:09.124693Z","updated_at":"2026-11-02T15:43:57.714116Z"},{"id":"DEBIAN-CVE-2010-0422","description":"gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, a related issue to CVE-2010-0414.","status":"published","published":"2010-02-24T18:30:00.467Z","modified":"2026-10-23T17:47:35.20251326Z","updated_at":"2026-11-02T15:45:24.013654Z"}]}}