{"id":"CVE-2010-0732","aliases":["DEBIAN-CVE-2010-0732","EUVD-2010-0758","GHSA-xm6w-hhcm-7v7g"],"status":"published","title":"gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs...","description":"gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.","severity":{"version":"2.0","score":6.2,"vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00296,"percentile":0.22453,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-362"],"published":"2010-03-19T19:00:00Z","modified":"2026-10-23T17:47:35Z","fixes":[{"ecosystem":"Debian:12","package":"gtk+2.0","fixed_in":["2.18.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gtk+2.0","fixed_in":["2.18.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gtk+2.0","fixed_in":["2.18.5-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gtk+2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.5-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gtk+2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gtk+2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.5-1"}]}]}],"products":[{"vendor":"gnome","product":"gtk"},{"vendor":"gnome","product":"screensaver"}],"references":[{"url":"http://secunia.com/advisories/39317","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/02/12/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article"]},{"url":"http://www.openwall.com/lists/oss-security/2010/03/16/9","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article"]},{"url":"http://www.securityfocus.com/bid/38211","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=565527","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix","report"]},{"url":"http://git.gnome.org/browse/gnome-screensaver/commit/?id=ab08cc93f2dc6223c8c00bfa1ca4f2d89069dbe0","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:109","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Broken Link","advisory"]},{"url":"http://git.gnome.org/browse/gnome-screensaver/commit/?h=gnome-2-28\u0026id=98f8a22412cf388217fd5b88915eadd274d68520","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://bugs.edge.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/446395","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=598476","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix","report"]},{"url":"http://www.openwall.com/lists/oss-security/2010/03/05/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","article","fix"]},{"url":"http://git.gnome.org/browse/gtk+/commit/?id=0748cf563d0d0d03001a62589f13be16a8ec06c1","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://www.heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0732"},{"url":"https://access.redhat.com/security/cve/CVE-2010-0732"},{"url":"https://github.com/advisories/GHSA-xm6w-hhcm-7v7g"},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-0732","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-0732","description":"gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.","status":"published","published":"2010-03-19T19:00:00Z","modified":"2024-08-07T00:59:38.691Z","updated_at":"2026-11-02T14:33:29.990758Z"}],"euvd":[{"id":"EUVD-2010-0758","description":"gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.","status":"published","published":"2010-03-19T19:00:00Z","modified":"2024-08-07T00:59:38Z","updated_at":"2026-11-03T01:39:44.13762Z"}],"ghsa":[{"id":"GHSA-xm6w-hhcm-7v7g","title":"gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs...","description":"gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.","status":"published","published":"2022-05-02T06:15:12Z","modified":"2023-02-10T05:06:34Z","cwes":["CWE-362"],"updated_at":"2026-11-02T14:54:02.310741Z"}],"nvd":[{"id":"CVE-2010-0732","description":"gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.","status":"published","published":"2010-03-19T19:30:00.483Z","modified":"2026-06-16T23:16:44.37Z","cvss":[{"version":"2.0","score":6.2,"vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:01:43.639743Z"}],"osv":[{"id":"CVE-2010-0732","description":"gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.","status":"published","published":"2010-03-19T19:30:00Z","modified":"2026-04-10T03:41:06.674829Z","updated_at":"2026-11-02T15:43:57.714116Z"},{"id":"DEBIAN-CVE-2010-0732","description":"gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times.","status":"published","published":"2010-03-19T19:30:00.483Z","modified":"2026-10-23T17:47:35.424582633Z","updated_at":"2026-11-02T15:45:24.316685Z"}]}}