Logo
›
›vulnerability›CVE-2014-1949
Name
CVE-2014-1949
Source
NVD ( link)Debian ( link)
Description
GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.
CWEs
CWE-284
Published Date
Updated Date
Workaround
-
Advisories
http://advisories.mageia.org/MGASA-2014-0374.htmlThird Party Advisory
http://seclists.org/oss-sec/2014/q1/327Mailing List
http://seclists.org/oss-sec/2014/q1/331Mailing List
http://www.mandriva.com/security/advisories?name=MDVSA-2015:162Broken Link
http://www.ubuntu.com/usn/USN-2475-1Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759145Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1064695Issue Tracking
https://github.com/linuxmint/cinnamon-screensaver/issues/44Third Party Advisory
http://advisories.mageia.org/MGASA-2014-0374.htmlThird Party Advisory
http://seclists.org/oss-sec/2014/q1/327Mailing List
http://seclists.org/oss-sec/2014/q1/331Mailing List
http://www.mandriva.com/security/advisories?name=MDVSA-2015:162Broken Link
http://www.ubuntu.com/usn/USN-2475-1Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759145Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1064695Issue Tracking
https://github.com/linuxmint/cinnamon-screensaver/issues/44Third Party Advisory

Analysis#

Affected Component
Analysis
libgtk2
Exploitable

Vulnerability Rating#

7.2
CVSSv2

Others affected components#

Name
Project
Project Version
Version
Status
libgtk3
buildroot
master
3.24.51
Not Affected
libgtk4
buildroot
master
4.21.0
Not Affected
gtk
openwrt
master
4.22.4-r1
Not Affected
gtk
openwrt
openwrt-25.12
4.18.6-r1
Not Affected
gtk+3
yocto
kirkstone
3.24.34
Not Affected
gtk4
yocto
kirkstone
4.6.9
Not Affected
gtk+3
yocto
master
3.24.52
Not Affected
gtk4
yocto
master
4.22.4
Not Affected
gtk+3
yocto
scarthgap
3.24.41
Not Affected
gtk4
yocto
scarthgap
4.14.1
Not Affected