CVE-2010-0285
Last modified
CVE-2010-0285 is a vulnerability of currently unknown severity. gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor.. EPSS estimates a 0.31% chance of exploitation in the next 30 days.
Description
gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gnome | Screensaver | 2.14.3 |
| Gnome | Screensaver | 2.22.2 |
| Gnome | Screensaver | 2.27 |
| Gnome | Screensaver | 2.28.0 |
| Gnome | Screensaver | 2.28.3 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-0285?
How severe is CVE-2010-0285?
How do I fix CVE-2010-0285?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-0277slp.c in the MSN protocol plugin in libpurple in Pidgin befo…
- CVE-2010-0278A certain ActiveX control in msgsc.14.0.8089.726.dll in Micr…
- CVE-2010-0279Unrestricted file upload vulnerability in upload.php in BTS-…
- CVE-2010-0280Array index error in Jan Eric Kyprianidis lib3ds 1.x, as use…
- CVE-2010-0283The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb…
- CVE-2010-0284Directory traversal vulnerability in the getEntry method in …
- CVE-2010-0286Unspecified vulnerability in the OpenID Identity Authenticat…
- CVE-2010-0287Directory traversal vulnerability in the ACL Manager plugin …
- CVE-2010-0288A typo in the administrator permission check in the ACL Mana…
- CVE-2010-0289Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2010-0290Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9…
- CVE-2010-0291The Linux kernel before 2.6.32.4 allows local users to gain …
Are you affected by CVE-2010-0285?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
