Strix
26.1K

CVE-2009-1276

UnknownEPSS 0.37%

Last modified

CVE-2009-1276 is a vulnerability of currently unknown severity. XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.. EPSS estimates a 0.37% chance of exploitation in the next 30 days.

Description

XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.

Metrics

EPSS Probability
0.37%

29.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
SunOpensolaris<= snv_108
SunOpensolarissnv_01
SunOpensolarissnv_02
SunOpensolarissnv_03
SunOpensolarissnv_04
SunOpensolarissnv_05
SunOpensolarissnv_06
SunOpensolarissnv_07
SunOpensolarissnv_08
SunOpensolarissnv_09
SunOpensolarissnv_10
SunOpensolarissnv_11
SunOpensolarissnv_12
SunOpensolarissnv_13
SunOpensolarissnv_14
SunOpensolarissnv_15
SunOpensolarissnv_16
SunOpensolarissnv_17
SunOpensolarissnv_18
SunOpensolarissnv_19
SunOpensolarissnv_20
SunOpensolarissnv_21
SunOpensolarissnv_22
SunOpensolarissnv_23
SunOpensolarissnv_24
SunOpensolarissnv_25
SunOpensolarissnv_26
SunOpensolarissnv_27
SunOpensolarissnv_28
SunOpensolarissnv_29
SunOpensolarissnv_30
SunOpensolarissnv_31
SunOpensolarissnv_32
SunOpensolarissnv_33
SunOpensolarissnv_34
SunOpensolarissnv_35
SunOpensolarissnv_36
SunOpensolarissnv_37
SunOpensolarissnv_38
SunOpensolarissnv_39
SunOpensolarissnv_40
SunOpensolarissnv_41
SunOpensolarissnv_42
SunOpensolarissnv_43
SunOpensolarissnv_44
SunOpensolarissnv_45
SunOpensolarissnv_46
SunOpensolarissnv_47
SunOpensolarissnv_48
SunOpensolarissnv_49

Showing 50 of 111 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2009-1276?
XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.
How severe is CVE-2009-1276?
Severity scoring for CVE-2009-1276 is pending analysis. The EPSS model estimates a 0.37% probability of exploitation in the next 30 days.
How do I fix CVE-2009-1276?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2009-1276?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST