The screensaver does not activate -- and thereby the screen lock does not activate -- if the Sound Menu is open

Bug #827068 reported by Josh Leverette
264
This bug affects 2 people
Affects Status Importance Assigned to Milestone
gnome-screensaver (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

This was tested with the mouse hovering over the play/pause button with music playing and with it paused. This bug is easily reproducible.
1) Open Banshee
2) Play some music
3) Pause it (or don't)
4) Hover the mouse over the play/pause button in the sound menu

Screen Lock will not activate, allowing anyone to read information off your screen and to perform input for 1 to 3 seconds (on my powerful machine, perhaps longer on slower machines) allowing for breaches of security, not to mention image burn in if somebody in a developing country uses a CRT.

This bug is probably reproducible under a variety of circumstances involving menus, but this is how i discovered it. This is a rather serious security flaw.

Tested with Ubuntu 11.04 64 bit on an Intel i5-2500K, 8GB RAM, 120GB SSD, and 1080p monitor via HDMI. These are all variables that could theoretically impact the viability of this security flaw. Perhaps VGA connections are handled differently and would allow screen lock, perhaps a slower computer would grant a larger window of opportunity, maybe this is a 64 bit only bug, etc.

visibility: private → public
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in gnome-screensaver (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.