CVE-2013-1050

HIGH 7.2CVE-2013-1050 · Published 08/03/2013 · updated 16/06/2026

In short

CVE-2013-1050 is a HIGH (CVSS 7.2) vulnerability affecting gnome screensaver (gnome).
Chance of exploitation in the next 30 days (EPSS): 0.38%, higher than 31.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gnome screensaver gnome	`= 3.5.4= 3.5.5= 3.6.0`	No fix yet

Description

The default configuration in gnome-screensaver 3.5.4 through 3.6.0 sets the AutostartCondition line to fallback mode in the .desktop file, which prevents the program from starting automatically after login and allows physically proximate attackers to bypass screen locking and access an unattended workstation.

References

ubuntu.com/usn/USN-1716-1
bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/1120126 · Vendor Advisory
bugzilla.gnome.org/show_bug.cgi
git.gnome.org/browse/gnome-screensaver/commit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free