CVEvulnerability
CVE-2009-1276
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2009-04-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.
Affected configurations
• sun opensolaris (<= snv 108)
• sun opensolaris snv 01
• sun opensolaris snv 02
• sun opensolaris snv 03
• sun opensolaris snv 04
• sun opensolaris snv 05
• sun opensolaris snv 06
• sun opensolaris snv 07
• sun opensolaris snv 08
• sun opensolaris snv 09
• sun opensolaris snv 10
• sun opensolaris snv 11
• sun opensolaris snv 12
• sun opensolaris snv 13
• sun opensolaris snv 14
• sun opensolaris snv 15
• sun opensolaris snv 16
• sun opensolaris snv 17
• sun opensolaris snv 18
• sun opensolaris snv 19
• sun opensolaris snv 20
• sun opensolaris snv 21
• sun opensolaris snv 22
• sun opensolaris snv 23
• sun opensolaris snv 24
• sun opensolaris snv 25
• sun opensolaris snv 26
• sun opensolaris snv 27
• sun opensolaris snv 28
• sun opensolaris snv 29
• sun opensolaris snv 30
• sun opensolaris snv 31
• sun opensolaris snv 32
• sun opensolaris snv 33
• sun opensolaris snv 34
• sun opensolaris snv 35
• sun opensolaris snv 36
• sun opensolaris snv 37
• sun opensolaris snv 38
• sun opensolaris snv 39
• sun opensolaris snv 40
• sun opensolaris snv 41
• sun opensolaris snv 42
• sun opensolaris snv 43
• sun opensolaris snv 44
• sun opensolaris snv 45
• sun opensolaris snv 46
• sun opensolaris snv 47
• sun opensolaris snv 48
• sun opensolaris snv 49
• sun opensolaris snv 50
• sun opensolaris snv 51
• sun opensolaris snv 52
• sun opensolaris snv 53
• sun opensolaris snv 54
• sun opensolaris snv 55
• sun opensolaris snv 56
• sun opensolaris snv 57
• sun opensolaris snv 58
• sun opensolaris snv 59
… and 51 more
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://securitytracker.com/id?1022009 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-22-1 Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-255308-1 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/34421 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/0978 www.vupen.com
- http://securitytracker.com/id?1022009 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-22-1 Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-255308-1 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/34421 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/0978 www.vupen.com