Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.6

gnome-screensaver can be bypassed with external monitor

CVE-2010-0285 · published 16 years ago
Summary

On Debian systems using gnome-screensaver versions 2.14.3 through 2.28.3, enabling the X "extend screen" option lets someone nearby connect an extra monitor and see part of the desktop even though the screen is locked. This means an unattended workstation could be accessed without entering a password. The risk is reduced by disabling screen extension, applying any available updates, or configuring the system to lock all displays when the session is locked.

What to do
  • Update debian gnome-screensaver to version 2.28.3-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian gnome-screensaver < 2.28.3-1
Fix: upgrade to 2.28.3-1
Debian:13 debian gnome-screensaver < 2.28.3-1
Fix: upgrade to 2.28.3-1
– gnome screensaver 2.14.3
2.22.2
2.27
2.28.0
2.28.3
cpe:2.3:a:gnome:screensaver:2.14.3:*:*:*:*:*:*:*
Original advisory text
gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an un...
gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor.
References
Severity
5.6 Medium
Exploitation
<1% chance of attack within 30 days
Timeline
Published24 Feb 2010
Updated4 Nov 2026
First seen23 Sep 2026
Sources
DEBIAN-CVE-2010-0285 · OSV
CVE-2010-0285 · NVD
Track software like this
Free during beta