CVE-2009-2711

Name: CVE-2009-2711
Creator: NVD / NIST
Published: 2009-08-07T19:00:01.093+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.39%

Last modified Jun 16, 2026

CVE-2009-2711 is a vulnerability of currently unknown severity. XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276.. EPSS estimates a 0.39% chance of exploitation in the next 30 days.

Description

XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276.

Metrics

EPSS Probability

0.39%

31.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-200

Affected Software

Vendor	Product	Versions
Sun	Opensolaris	snv_01
Sun	Opensolaris	snv_02
Sun	Opensolaris	snv_03
Sun	Opensolaris	snv_04
Sun	Opensolaris	snv_05
Sun	Opensolaris	snv_06
Sun	Opensolaris	snv_07
Sun	Opensolaris	snv_08
Sun	Opensolaris	snv_09
Sun	Opensolaris	snv_10
Sun	Opensolaris	snv_11
Sun	Opensolaris	snv_12
Sun	Opensolaris	snv_13
Sun	Opensolaris	snv_14
Sun	Opensolaris	snv_15
Sun	Opensolaris	snv_16
Sun	Opensolaris	snv_17
Sun	Opensolaris	snv_18
Sun	Opensolaris	snv_19
Sun	Opensolaris	snv_20
Sun	Opensolaris	snv_21
Sun	Opensolaris	snv_22
Sun	Opensolaris	snv_23
Sun	Opensolaris	snv_24
Sun	Opensolaris	snv_25
Sun	Opensolaris	snv_26
Sun	Opensolaris	snv_27
Sun	Opensolaris	snv_28
Sun	Opensolaris	snv_29
Sun	Opensolaris	snv_30
Sun	Opensolaris	snv_31
Sun	Opensolaris	snv_32
Sun	Opensolaris	snv_33
Sun	Opensolaris	snv_34
Sun	Opensolaris	snv_35
Sun	Opensolaris	snv_36
Sun	Opensolaris	snv_37
Sun	Opensolaris	snv_38
Sun	Opensolaris	snv_39
Sun	Opensolaris	snv_40
Sun	Opensolaris	snv_41
Sun	Opensolaris	snv_42
Sun	Opensolaris	snv_43
Sun	Opensolaris	snv_44
Sun	Opensolaris	snv_45
Sun	Opensolaris	snv_46
Sun	Opensolaris	snv_47
Sun	Opensolaris	snv_48
Sun	Opensolaris	snv_49
Sun	Opensolaris	snv_50

Showing 50 of 123 affected configurations. See NVD for the full list.

References

http://secunia.com/advisories/36170Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-115298-02-1Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-258928-1Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020463.1-1
http://www.securityfocus.com/bid/35964Patch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5838
http://secunia.com/advisories/36170Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-115298-02-1Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-258928-1Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020463.1-1
http://www.securityfocus.com/bid/35964Patch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5838

Timeline

Published: Aug 7, 2009
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2009-2711?

How severe is CVE-2009-2711?

Severity scoring for CVE-2009-2711 is pending analysis. The EPSS model estimates a 0.39% probability of exploitation in the next 30 days.

How do I fix CVE-2009-2711?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2009-2711?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST