UnratedFix available
gnome-screensaver, xorg-server — security advisory
GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.
- Products
- gnome-screensaver, xorg-server
- Affected versions
- Not specified
- Fixed versions
- 2.20.0-1.1, 2:1.4.1~git20080118-1
- CVEs
- CVE-2007-3920
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 15:45 UTC · Revision 1
Source evidence
GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.
osv:DEBIAN-CVE-2007-3920
gnome-screensaver
Fixed versions: 2.20.0-1.1
gnome-screensaver
Fixed versions: 2.20.0-1.1
xorg-server
Fixed versions: 2:1.4.1~git20080118-1
xorg-server
Fixed versions: 2:1.4.1~git20080118-1
xorg-server
Fixed versions: 2:1.4.1~git20080118-1
Complete source record
{
"id": "f64ca3af95d79debd4a217c9dac9c9bf17c44d435ac808fa363bb42d5a52fea3",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2007-3920",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2007-3920",
"summary": "GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.",
"evidence": "osv:DEBIAN-CVE-2007-3920",
"products": [
{
"name": {
"value": "gnome-screensaver",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.20.0-1.1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "gnome-screensaver",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.20.0-1.1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xorg-server",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:1.4.1~git20080118-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xorg-server",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:1.4.1~git20080118-1",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xorg-server",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:1.4.1~git20080118-1",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2007-3920",
"aliases": [
"DEBIAN-CVE-2007-3920"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.20.0-1.1"
}
]
}
],
"package": {
"name": "gnome-screensaver",
"purl": "pkg:deb/debian/gnome-screensaver?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-3920.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.20.0-1.1"
}
]
}
],
"package": {
"name": "gnome-screensaver",
"purl": "pkg:deb/debian/gnome-screensaver?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-3920.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:1.4.1~git20080118-1"
}
]
}
],
"package": {
"name": "xorg-server",
"purl": "pkg:deb/debian/xorg-server?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-3920.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:1.4.1~git20080118-1"
}
]
}
],
"package": {
"name": "xorg-server",
"purl": "pkg:deb/debian/xorg-server?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-3920.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:1.4.1~git20080118-1"
}
]
}
],
"package": {
"name": "xorg-server",
"purl": "pkg:deb/debian/xorg-server?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-3920.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
}
],
"modified": "2026-10-21T17:47:33.584775555Z",
"provider": "osv",
"upstream": [
"CVE-2007-3920"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2007-3920"
]
},
"related_cves": [
{
"value": "CVE-2007-3920",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 398291,
"published_at": "2007-10-29T21:46:00+00:00"
}