CVE-2007-3920

Description

GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	xorg-server	2:1.4.1~git20080118-1	—
Debian 13	gnome-screensaver	2.20.0-1.1	—
Debian 13	xorg-server	2:1.4.1~git20080118-1	—
Debian 12	gnome-screensaver	2.20.0-1.1	—
Debian 12	xorg-server	2:1.4.1~git20080118-1	—
Debian 5.0	gnome-screensaver	2.18.2-1+lenny1	DTSA-75-1

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 5	compiz +1	0.0.13-0.37.20060817git.el5	RHSA-2008:0485

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Red Hat Rhel Productivity 5	compiz +1	0.0.13-0.37.20060817git.el5	RHSA-2008:0485

Advisories 2

RHSA-2008:0485 Red Hat Security Advisory: compiz security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
DTSA-75-1 gnome-screensaver - authentication bypass Debian Security (DSA / DLA) · Mar 9, 2026

References

https://bugzilla.redhat.com/show_bug.cgi?id=363061
oval:org.mitre.oval:def:10192 vdb-entry signature
FEDORA-2008-0956 vendor-advisory
USN-537-2 vendor-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=357071
30715 third-party-advisory
gnomescreensaver-compiz-security-bypass(37410) vdb-entry
SUSE-SA:2008:027 vendor-advisory
USN-537-1 vendor-advisory
FEDORA-2008-0930 vendor-advisory
26188 vdb-entry
RHSA-2008:0485 vendor-advisory
27381 third-party-advisory
28627 third-party-advisory
30329 third-party-advisory