CVE-2010-0414

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-02-11 · updated 2026-06-16

Description

gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor.

Affected products

GNOME Screensaver: through 2.28.1; 2.13, 2.20, 2.20.0, 2.26.1, 2.28.0

References

http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.2.news
http://git.gnome.org/browse/gnome-screensaver/commit/?id=a5f66339be6719c2b8fc478a1d5fc6545297d950
http://git.gnome.org/browse/gnome-screensaver/commit/?id=dcca89b7ab6e1220815af38da246434b2e13fd9f
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034904.html
http://secunia.com/advisories/38468
http://secunia.com/advisories/38532
http://secunia.com/advisories/38534
http://www.mandriva.com/security/advisories?name=MDVSA-2010:040
http://www.osvdb.org/62219
http://www.securityfocus.com/bid/38149
http://www.ubuntu.com/usn/USN-898-1
https://bugzilla.gnome.org/show_bug.cgi?id=609337

Get alerted when CVE-2010-0414 or the next vulnerability affects your stack