Unscored severity · published Aug 7, 2012
CVE-2012-3452
gnome-screensaver 3.4.x before 3.4.4 and 3.5.x before 3.5.4, when multiple screens are used, only locks the screen with the active focus, which allows physically proximate…
–
CVSS
0.3%
EPSS
No
On KEV
Description
gnome-screensaver 3.4.x before 3.4.4 and 3.5.x before 3.5.4, when multiple screens are used, only locks the screen with the active focus, which allows physically proximate attackers to bypass screen locking and access an unattended workstation.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Screensaver · Gnome
3.4.0; 3.4.2; 3.4.3; 3.5.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3452
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3452
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/08/03/3
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/08/03/5
bugzilla.gnome.org
https://bugzilla.gnome.org/show_bug.cgi?id=679441
More from Screensaver
–
CVE-2010-0732
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in…
–
CVE-2010-0422
gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors,…
–
CVE-2010-0285
gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen…
–
CVE-2009-4642
gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows…
–
CVE-2009-4641
gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically…