CVE-2010-2532

CVE-2010-2532 describes a vulnerability in lxsession-logout within LXDE, specifically affecting SUSE openSUSE 11.3 and potentially other platforms. The issue arises because the screen is not locked when Suspend or Hibernate buttons are pressed, allowing physically proximate attackers to access an unattended laptop upon resume. This vulnerability carries a CVSS score of 7.2, indicating high severity. It is a local attack (AV:L) with low attack complexity (AC:L) requiring no authentication (Au:N), and could lead to complete compromise of confidentiality, integrity, and availability (C:C/I:C/A:C). Despite its severity, there is no evidence of active exploitation, nor is exploit code available on platforms like Metasploit or ExploitDB. The CVE has received minimal community discussion and no media coverage, suggesting it is not a widely recognized or exploited threat.