CVE-2009-4996 - CVE House
Back to Database
Status published High CVE-2009-4996

Xfce4-session 4.5.91 in Xfce does not lock the screen when...

Vulnerability Description

Xfce4-session 4.5.91 in Xfce does not lock the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532. NOTE: there is no general agreement that this is a vulnerability, because separate control over locking can be an equally secure, or more secure, behavior in some threat environments

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-4996

Credits & Attribution

No credits recorded in the NVD database.

References

More from xfce

View All →
CVE-2022-45062
In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there...
Unknown 0
CVE-2022-32278
XFCE 4.16 allows attackers to execute arbitrary code because xdg-open...
High 8.8
CVE-2021-32563
An issue was discovered in Thunar before 4.16.7 and 4.17.x...
Critical 9.8
CVE-2018-18398
Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the...
Medium 4.7
CVE-2007-6532
Double free vulnerability in the Widget Library (libxfcegui4) in Xfce...
Critical 10

Affected Vendor

Affected Software

xfce
Vulnerable Versions:
4.6

Timeline

Official Publish: September 7th, 2010
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.