CVE-2009-1276

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-04-09 · updated 2026-06-16
Weakness: CWE-200

Description

XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.

Affected products

Sun Opensolaris: through snv_108; snv_01, snv_02, snv_03, snv_04, snv_05, snv_06 (+101)
Sun Solaris: 8, 9, 10

References

http://securitytracker.com/id?1022009
http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-22-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-255308-1
http://www.securityfocus.com/bid/34421
http://www.vupen.com/english/advisories/2009/0978
http://securitytracker.com/id?1022009
http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-22-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-255308-1
http://www.securityfocus.com/bid/34421
http://www.vupen.com/english/advisories/2009/0978

Get alerted when CVE-2009-1276 or the next vulnerability affects your stack