high7.8
CVE-2011-2187
xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attacke…
Impact
xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xscreensaver Project | Xscreensaver | before 5.14 |
| Debian | Debian Linux | Versions 8.0, 9.0, 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/security/cve/cve-2011-2187
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627382
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2187
- https://security-tracker.debian.org/tracker/CVE-2011-2187
- https://www.jwz.org/xscreensaver/changelog.html
- https://www.openwall.com/lists/oss-security/2011/06/06/17
- https://access.redhat.com/security/cve/cve-2011-2187
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627382
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2187
- https://security-tracker.debian.org/tracker/CVE-2011-2187
- https://www.jwz.org/xscreensaver/changelog.html
- https://www.openwall.com/lists/oss-security/2011/06/06/17