VDB
CVE-2010-0923
CVE-2010-0923
PUBLISHED
CVSS 6.900000095367432 MEDIUM
Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attackers to bypass KScreenSaver screen locking and access an unattended workstation by pressing the Enter key at a certain time, related to multiple forked processes.
EPSS 0.28% · 20.3th percentile
Risk Scores
CVSS 2.0
6.900000095367432
EPSS Score
0.28%
20.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| kde | kde_sc | 4.4.0 |
| n/a | n/a | n/a |
Timeline
- Mar 3, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 8, 2023 EPSS Score
- May 31, 2023 EPSS Score
References
- [oss-security] 20100212 Re: CVE Request: KDE screensaver unlock issue similar to GNOME one mailing-list
- ADV-2010-0409 vdb
- http://securitytracker.com/id?1023641 technical
- http://secunia.com/advisories/38600 advisory
- http://websvn.kde.org/?view=revision&revision=1089241 patch
- http://www.openwall.com/lists/oss-security/2010/02/17/3 technical
- https://bugzilla.novell.com/show_bug.cgi?id=579280 technical
- https://nvd.nist.gov/vuln/detail/CVE-2010-0923 advisory
- https://bugs.kde.org/show_bug.cgi?id=217882 url
- http://bugs.kde.org/show_bug.cgi?id=226449 url
- http://marc.info/?l=oss-security&m=126598163422670&w=2 url
- http://marc.info/?l=oss-security&m=126600468622421&w=2 url
- http://websvn.kde.org/?revision=1089213&view=revision url
- http://websvn.kde.org/trunk/KDE/kdebase/workspace/krunner/lock/lockdlg.cc?r1=1089213&r2=1089212&pathrev=1089213 url
- http://www.kde.org/info/security/advisory-20100217-1.txt url