Vulnerabilities > CVE-2009-3100 - Denial-Of-Service vulnerability in OpenSolaris

CVSS 4.0 - MEDIUM

Attack vector

LOCAL

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

local

high complexity

sun

x-org

NVD

Published: 2009-09-08

Updated: 2011-12-21

Summary

xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 9 and 10, OpenSolaris snv_109 through snv_122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support, which allows local users to cause a denial of service (system hang) by locking the screen and then attempting to launch an Accessibility pop-up window, related to a regression in certain Solaris and OpenSolaris patches.

Vulnerable Configurations

Part	Description	Count
OS	Sun SUN Opensolaris Snv_109 SUN Opensolaris Snv_110 SUN Opensolaris Snv_111 SUN Opensolaris Snv_112 SUN Opensolaris Snv_113 SUN Opensolaris Snv_114 SUN Opensolaris Snv_115 SUN Opensolaris Snv_116 SUN Opensolaris Snv_117 SUN Opensolaris Snv_118 SUN Opensolaris Snv_119 SUN Opensolaris Snv_120 SUN Opensolaris Snv_121 SUN Opensolaris Snv_122 SUN Solaris 9 SUN Solaris 10 SUN Solaris 8	34
Application	X.Org X.Org X11 6.4.1	1

Summary

Vulnerable Configurations

References