CVE-2010-0285 Security feature bypass in n/a

Medium 5.6 Published Updated

Physically proximate attackers can bypass screen locking and view desktop content by attaching an external monitor when screen extension is enabled.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2010-0285?

CVE-2010-0285 is a medium-severity vulnerability in n/a, published on 24 Feb 2010. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor.

Which versions are affected by CVE-2010-0285?

It affects 1 product.

Products include Gnome Screensaver.

How do I fix CVE-2010-0285?

Apply the vendor's patch.

Is CVE-2010-0285 being exploited?

There is no known exploitation of CVE-2010-0285 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2010-0285, GHSA-h2mw-974c-6pw2.

Is CVE-2010-0285 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free