CVE-2009-1276

XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.

• CWE-200

• http://securitytracker.com/id?1022009
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-22-1Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-255308-1Patch, Vendor Advisory
• http://www.securityfocus.com/bid/34421
• http://www.vupen.com/english/advisories/2009/0978
• http://securitytracker.com/id?1022009
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-22-1Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-255308-1Patch, Vendor Advisory
• http://www.securityfocus.com/bid/34421
• http://www.vupen.com/english/advisories/2009/0978

Published

Apr 9, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1270libclamav/untar.c in ClamAV before 0.95 allows remote attack…
• CVE-2009-1271The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2…
• CVE-2009-1272The php_zip_make_relative_path function in php_zip.c in PHP …
• CVE-2009-1273pam_ssh 1.92 and possibly other versions, as used when PAM i…
• CVE-2009-1274Integer overflow in the qt_error parse_trak_atom function in…
• CVE-2009-1275Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and …
• CVE-2009-1277SQL injection vulnerability in index.php in Gravity Board X …
• CVE-2009-1278Static code injection vulnerability in forms/ajax/configure.…
• CVE-2009-1279Multiple cross-site scripting (XSS) vulnerabilities in Jooml…
• CVE-2009-1280Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2009-1281Cross-site scripting (XSS) vulnerability in glFusion before …
• CVE-2009-1282SQL injection vulnerability in private/system/lib-session.ph…