CVE-2009-4642

CVE-2009-4642 describes a vulnerability in gnome-screensaver 2.26.1, where it incorrectly relies on the gnome-session D-Bus interface for idle time, even in Xfce environments like Xubuntu or Mythbuntu. This flaw allows a physically proximate attacker to bypass screen locking on unattended workstations. With a CVSS score of 7.2 (High), this vulnerability has a local attack vector with low complexity, enabling full compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed on the CISA KEV catalog.