大多数屏幕保护程序创建了高级全屏窗口来涵盖桌面并使用该窗口获取输入。Compiz 包含取消重定向该窗口的选项，但在某些情况下，这会损坏获取并危害锁定屏幕。(CVE-2007-3920)

大部分的螢幕保護程式都會建立一個最上層的全螢幕視窗以覆蓋桌面，並以該視窗抓取輸入。Compiz 有一個取消重新導向該視窗的選項，但在某些情況下，這會中斷抓取並入侵已鎖定的畫面。(CVE-2007-3920)

画面セーバーのほとんどは、デスクトップをカバーする最上層のフルスクリーンウィンドウを作成し、そのウィンドウで入力をグラブします。Compiz にはそのウィンドウのリダイレクトを解消するオプションがありますが、一部の場合ではこれによりグラブが中断され、ロックされた画面が危険にさらされます。（CVE-2007-3920）

When enabling the 'unredirect fullscreen windows' option, compiz will unredirect fullscreen windows to improve performace. However, unredirecting will as a side effect break any grabs on that window, which compromises most screensavers. This X server update suppresses this unintended side effect and restores the security of the screensavers. See also CVE-2007-3069.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Most screen savers create a top-level fullscreen window to cover the desktop, and grab the input with that window. Compiz has an option to un-redirect that window, but in some cases, this breaks the grab and compromises the locked screen. (CVE-2007-3920)

This update fixes multiple vulnerabilities reported by iDefense :

  - CVE-2008-2360 - RENDER Extension heap buffer overflow

  - CVE-2008-2361 - RENDER Extension crash

  - CVE-2008-2362 - RENDER Extension memory corruption 

  - CVE-2008-1379 - MIT-SHM arbitrary memory read

  - CVE-2008-1377 - RECORD and Security extensions memory     corruption Additionally fixes for :

  - gnome-screensaver loses keyboard focus lock under compiz     (CVE-2007-3920)

Jens Askengren discovered that gnome-screensaver became confused when running under Compiz, and could lose keyboard lock focus. A local attacker could exploit this to bypass the user's locked screen saver.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated compiz packages that prevent Compiz from breaking screen saver grabs are now available for Red Hat Enterprise Linux 5.

This update has been rated as having low security impact by the Red Hat Security Response Team.

Compiz is an OpenGL-based window and compositing manager.

Most screen savers create a top-level fullscreen window to cover the desktop, and grab the input with that window. Compiz has an option to un-redirect that window, but in some cases, this breaks the grab and compromises the locked screen. (CVE-2007-3920)

Users of compiz are advised to upgrade to these updated packages, which remove this option to resolve this issue.

USN-537-1 fixed vulnerabilities in gnome-screensaver. The fixes were incomplete, and only reduced the scope of the vulnerability, without fully solving it. This update fixes related problems in compiz.

Jens Askengren discovered that gnome-screensaver became confused when running under Compiz, and could lose keyboard lock focus. A local attacker could exploit this to bypass the user's locked screen saver.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes multiple vulnerabilities reported by iDefense :

  - CVE-2008-2360 - RENDER Extension heap buffer overflow

  - CVE-2008-2361 - RENDER Extension crash

  - CVE-2008-2362 - RENDER Extension memory corruption 

  - CVE-2008-1379 - MIT-SHM arbitrary memory read

  - CVE-2008-1377 - RECORD and Security extensions memory     corruption Additionally fixes for :

  - XvReputImage crashes due to Nulled PortPriv->pDraw

  - gnome-screensaver loses keyboard focus lock under compiz     (CVE-2007-3920)

ID	名稱	產品	系列	已發布	已更新	嚴重性
60403	Scientific Linux 安全更新：SL5.x i386/x86_64 中的 compiz	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
60403	Scientific Linux 安全性更新：SL5.x i386/x86_64 上的 compiz	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
60403	Scientific Linux セキュリティ更新：SL5.x i386/x86_64 の compiz	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
30082	Fedora 8 : xorg-x11-server-1.3.0.0-40.fc8 (2008-0930)	Nessus	Fedora Local Security Checks	2008/1/27	2021/1/11	medium
60403	Scientific Linux Security Update : compiz on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
30083	Fedora 7 : xorg-x11-server-1.3.0.0-16.fc7 (2008-0956)	Nessus	Fedora Local Security Checks	2008/1/27	2021/1/11	medium
33166	openSUSE 10 Security Update : xorg-x11-server (xorg-x11-server-5316)	Nessus	SuSE Local Security Checks	2008/6/12	2021/1/14	critical
28143	Ubuntu 7.10 : gnome-screensaver vulnerability (USN-537-1)	Nessus	Ubuntu Local Security Checks	2007/11/10	2021/1/19	medium
32427	RHEL 5 : compiz (RHSA-2008:0485)	Nessus	Red Hat Local Security Checks	2008/5/22	2021/1/14	medium
28144	Ubuntu 7.10 : compiz vulnerability (USN-537-2)	Nessus	Ubuntu Local Security Checks	2007/11/10	2021/1/19	medium
33165	openSUSE 10 Security Update : xorg-x11-Xvnc (xorg-x11-Xvnc-5317)	Nessus	SuSE Local Security Checks	2008/6/12	2021/1/14	critical

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

critical

medium

medium

medium

critical