CVE-2009-4642

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-02-11 · updated 2026-06-16

Description

gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended.

Affected products

GNOME Screensaver: 2.26.1

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=536381
http://bugzilla.xfce.org/show_bug.cgi?id=5927
https://bugzilla.gnome.org/show_bug.cgi?id=592093
https://launchpad.net/bugs/411350
https://launchpad.net/bugs/493573
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=536381
http://bugzilla.xfce.org/show_bug.cgi?id=5927
https://bugzilla.gnome.org/show_bug.cgi?id=592093
https://launchpad.net/bugs/411350
https://launchpad.net/bugs/493573

Get alerted when CVE-2009-4642 or the next vulnerability affects your stack