Back to CVE Browser

CVE-2013-1050

HIGH

7.2

CVSS Severity Score

EPSS Score0.1630%

EPSS Percentile37.51th

PublishedMar 8, 2013

Last ModifiedApr 29, 2026

Vulnerability Description

The default configuration in gnome-screensaver 3.5.4 through 3.6.0 sets the AutostartCondition line to fallback mode in the .desktop file, which prevents the program from starting automatically after login and allows physically proximate attackers to bypass screen locking and access an unattended workstation.

Affected Platforms (CPE)

📦

Gnome

Gnome Screensaver

= 3.5.4

📦

Gnome

Gnome Screensaver

= 3.5.5

📦

Gnome

Gnome Screensaver

= 3.6.0

References & Advisories

🔗 http://www.ubuntu.com/usn/USN-1716-1

🔗 https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/1120126

🔗 https://bugzilla.gnome.org/show_bug.cgi?id=683060

🔗 https://git.gnome.org/browse/gnome-screensaver/commit/?id=1940dc6bc8ad5ee2c029714efb1276c05ca80bd4

🔗 http://www.ubuntu.com/usn/USN-1716-1

🔗 https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/1120126

🔗 https://bugzilla.gnome.org/show_bug.cgi?id=683060

🔗 https://git.gnome.org/browse/gnome-screensaver/commit/?id=1940dc6bc8ad5ee2c029714efb1276c05ca80bd4

Related Vulnerabilities

CVE-2010-04147.2

gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstatio...

CVE-2009-46417.2

gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable ...

CVE-2009-46427.2

gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop suc...

CVE-2014-19497.2

GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate a...