CVE-2007-3920
gnome-screensaver loses keyboard grab when running under compiz
Severity Score
6.2
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.
El salvapantallas 2.20 de GNOME en Ubuntu 7.10, cuando se usa con Compiz, no reserva el foco de entrada apropiadamente, lo cual permite a atacantes remotos con acceso físico tomar el control de la sesión después de haber introducido la secuencia Alt-Tab, tema similar a CVE-2007-3069.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-07-20 CVE Reserved
- 2007-10-24 CVE Published
- 2024-08-07 CVE Updated
- 2024-09-01 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (17)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/28627 | Third Party Advisory | |
| http://secunia.com/advisories/30329 | Third Party Advisory | |
| http://secunia.com/advisories/30715 | Third Party Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=357071 | X_refsource_confirm | |
| https://bugzilla.redhat.com/show_bug.cgi?id=363061 | X_refsource_confirm | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/37410 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10192 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/27381 | 2017-09-29 | |
| http://www.securityfocus.com/bid/26188 | 2017-09-29 | |
| http://www.ubuntu.com/usn/usn-537-1 | 2017-09-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Compiz Search vendor "Compiz" | Compiz Search vendor "Compiz" for product "Compiz" | * | - |
Affected
| in | Ubuntu Search vendor "Ubuntu" | Ubuntu Linux Search vendor "Ubuntu" for product "Ubuntu Linux" | 7.10 Search vendor "Ubuntu" for product "Ubuntu Linux" and version "7.10" | amd64 |
Safe
|
| Compiz Search vendor "Compiz" | Compiz Search vendor "Compiz" for product "Compiz" | * | - |
Affected
| in | Ubuntu Search vendor "Ubuntu" | Ubuntu Linux Search vendor "Ubuntu" for product "Ubuntu Linux" | 7.10 Search vendor "Ubuntu" for product "Ubuntu Linux" and version "7.10" | i386 |
Safe
|
| Compiz Search vendor "Compiz" | Compiz Search vendor "Compiz" for product "Compiz" | * | - |
Affected
| in | Ubuntu Search vendor "Ubuntu" | Ubuntu Linux Search vendor "Ubuntu" for product "Ubuntu Linux" | 7.10 Search vendor "Ubuntu" for product "Ubuntu Linux" and version "7.10" | powerpc |
Safe
|
| Compiz Search vendor "Compiz" | Compiz Search vendor "Compiz" for product "Compiz" | * | - |
Affected
| in | Ubuntu Search vendor "Ubuntu" | Ubuntu Linux Search vendor "Ubuntu" for product "Ubuntu Linux" | 7.10 Search vendor "Ubuntu" for product "Ubuntu Linux" and version "7.10" | sparc |
Safe
|
| Gnome Search vendor "Gnome" | Screensaver Search vendor "Gnome" for product "Screensaver" | 2.20 Search vendor "Gnome" for product "Screensaver" and version "2.20" | - |
Affected
| in | Ubuntu Search vendor "Ubuntu" | Ubuntu Linux Search vendor "Ubuntu" for product "Ubuntu Linux" | 7.10 Search vendor "Ubuntu" for product "Ubuntu Linux" and version "7.10" | amd64 |
Safe
|
| Gnome Search vendor "Gnome" | Screensaver Search vendor "Gnome" for product "Screensaver" | 2.20 Search vendor "Gnome" for product "Screensaver" and version "2.20" | - |
Affected
| in | Ubuntu Search vendor "Ubuntu" | Ubuntu Linux Search vendor "Ubuntu" for product "Ubuntu Linux" | 7.10 Search vendor "Ubuntu" for product "Ubuntu Linux" and version "7.10" | i386 |
Safe
|
| Gnome Search vendor "Gnome" | Screensaver Search vendor "Gnome" for product "Screensaver" | 2.20 Search vendor "Gnome" for product "Screensaver" and version "2.20" | - |
Affected
| in | Ubuntu Search vendor "Ubuntu" | Ubuntu Linux Search vendor "Ubuntu" for product "Ubuntu Linux" | 7.10 Search vendor "Ubuntu" for product "Ubuntu Linux" and version "7.10" | powerpc |
Safe
|
| Gnome Search vendor "Gnome" | Screensaver Search vendor "Gnome" for product "Screensaver" | 2.20 Search vendor "Gnome" for product "Screensaver" and version "2.20" | - |
Affected
| in | Ubuntu Search vendor "Ubuntu" | Ubuntu Linux Search vendor "Ubuntu" for product "Ubuntu Linux" | 7.10 Search vendor "Ubuntu" for product "Ubuntu Linux" and version "7.10" | sparc |
Safe
|