CVE-2007-3920 GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Ta...
MediumCVSS 6.2
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| compiz | All versions | No fix listed |
| GNOME screensaver | = 2.20 | No fix listed |
| debian/gnome-screensaver(Debian:12) | < 2.20.0-1.1 | 2.20.0-1.1 |
| debian/gnome-screensaver(Debian:13) | < 2.20.0-1.1 | 2.20.0-1.1 |
| debian/xorg-server(Debian:12) | < 2:1.4.1~git20080118-1 | 2:1.4.1~git20080118-1 |
| debian/xorg-server(Debian:13) | < 2:1.4.1~git20080118-1 | 2:1.4.1~git20080118-1 |
| debian/xorg-server(Debian:14) | < 2:1.4.1~git20080118-1 | 2:1.4.1~git20080118-1 |
References
- SUSE-SA:2008:027 vendor-advisory
- 27381 patch third-party-advisory vendor-advisory
- 28627 third-party-advisory
- 30329 third-party-advisory
- 30715 third-party-advisory
- RHSA-2008:0485 vendor-advisory
- 26188 patch vdb-entry
- USN-537-1 patch vendor-advisory
- USN-537-2 vendor-advisory
- bugzilla.redhat.com
- bugzilla.redhat.com
- gnomescreensaver-compiz-security-bypass(37410) vdb-entry
- oval:org.mitre.oval:def:10192 signature vdb-entry
- FEDORA-2008-0930 vendor-advisory
- FEDORA-2008-0956 vendor-advisory
- Debian Security Tracker CVE-2007-3920 vendor-advisory
- bugs.debian.org issue-tracking