CVE-2007-6389

Publication date 17 December 2007

Last updated 24 July 2024

Description

The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboard contents and X selection data for a locked session by using ctrl-V.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
gnome-screensaver	8.10 intrepid	Not affected
	8.04 LTS hardy	Not affected
	7.10 gutsy	Fixed 2.20.0-0ubuntu4.3
	7.04 feisty	Ignored end of life, was needed
	6.10 edgy	Ignored end of life, was needed
	6.06 LTS dapper	Not affected

Notes

mdeslaur

Dapper doesn't contain the notify feature

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
gnome-screensaver	Upstream: http://svn.gnome.org/viewvc/gnome-screensaver/branches/gnome-2-20/src/gs-lock-plug.c?r1=1323&r2=1337

References

Related Ubuntu Security Notices (USN)

USN-669-1
gnome-screensaver vulnerabilities
11 November 2008

Other references

https://www.cve.org/CVERecord?id=CVE-2007-6389