Vulnerabilities > CVE-2006-1335 - Denial-Of-Service vulnerability in Screensaver

047910
CVSS 3.7 - LOW
Attack vector
LOCAL
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
local
high complexity
gnome

Summary

gnome screensaver before 2.14, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs enabled, allows attackers with physical access to cause the screensaver to crash and access the session via the Ctl+Alt+Keypad-Multiply keyboard sequence, which removes the grab from gnome. The vulnerability has reportedly been fixed in version 2.14.

Vulnerable Configurations

Part Description Count
Application
Gnome
1