| ID |
CVE-2009-3746
|
| Summary |
XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276 and CVE-2009-2711. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 1.9 (as of 19-09-2017 - 01:29) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-16 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| LOCAL |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| PARTIAL |
NONE |
NONE |
|
| cvss-vector
via4
|
AV:L/AC:M/Au:N/C:P/I:N/A:N
|
| oval
via4
|
| accepted | 2010-01-25T04:00:25.444-05:00 | | class | vulnerability | | contributors | | name | Pai Peng | | organization | Hewlett-Packard |
| | definition_extensions | | comment | Solaris 10 (SPARC) is installed | | oval | oval:org.mitre.oval:def:1440 |
| comment | Solaris 10 (x86) is installed | | oval | oval:org.mitre.oval:def:1926 |
| | description | XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276 and CVE-2009-2711. | | family | unix | | id | oval:org.mitre.oval:def:6644 | | status | accepted | | submitted | 2009-12-17T14:02:00.000-05:00 | | title | A Regression in the Solaris 10 Gnome-XScreenSaver (see xscreensaver(1)) may Allow Pop-up Windows to Appear through XScreenSaver when the Accessibility Feature is On | | version | 36 |
|
| refmap
via4
|
|
| Last major update |
19-09-2017 - 01:29 |
| Published |
22-10-2009 - 16:30 |
| Last modified |
19-09-2017 - 01:29 |
