CVE-2009-2711

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-08-07 · updated 2026-06-16
Weakness: CWE-200

Description

XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276.

Affected products

Sun Opensolaris: snv_01, snv_02, snv_03, snv_04, snv_05, snv_06 (+113)
Sun Solaris: 9.0, 10, 8.0
X.Org X11: 6.4.1

References

http://secunia.com/advisories/36170
http://sunsolve.sun.com/search/document.do?assetkey=1-21-115298-02-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-258928-1
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020463.1-1
http://www.securityfocus.com/bid/35964
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5838
http://secunia.com/advisories/36170
http://sunsolve.sun.com/search/document.do?assetkey=1-21-115298-02-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-258928-1
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020463.1-1
http://www.securityfocus.com/bid/35964
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5838

Get alerted when CVE-2009-2711 or the next vulnerability affects your stack