CVE-2014-1949

2015-01-1616:59:00

CWE-284

mitre

web.nvd.nist.gov

cve-2014-1949

gtk+ 3.10.9

vulnerability

bypass

lock screen

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

26.7%

JSON

GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.

Affected configurations

Nvd

Node

linuxmintlinux_mintMatch17.0

Node

gnomegtkRange≤3.10.9

Node

canonicalubuntuMatch14.04lts

VendorProductVersionCPE
linuxmintlinux_mint17.0cpe:2.3:o:linuxmint:linux_mint:17.0:*:*:*:*:*:*:*
gnomegtk*cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*
canonicalubuntu14.04cpe:2.3:o:canonical:ubuntu:14.04:*:*:*:lts:*:*:*

Vendor	Product	Version	CPE
linuxmint	linux_mint	17.0	cpe:2.3:o:linuxmint:linux_mint:17.0:::::::*
gnome	gtk	*	cpe:2.3:a:gnome:gtk::::::::
canonical	ubuntu	14.04	cpe:2.3:o:canonical:ubuntu:14.04::::lts:::