Vulnerability Description
GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.
CVSS Score
7.2
HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linuxmint | Linux Mint | 17.0 |
| Gnome | Gtk | <= 3.10.9 |
| Canonical | Ubuntu | 14.04 |
Related Weaknesses (CWE)
References
- http://advisories.mageia.org/MGASA-2014-0374.htmlThird Party Advisory
- http://seclists.org/oss-sec/2014/q1/327Mailing ListThird Party Advisory
- http://seclists.org/oss-sec/2014/q1/331Mailing ListThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:162Broken Link
- http://www.ubuntu.com/usn/USN-2475-1Third Party Advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759145Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1064695Issue Tracking
- https://github.com/linuxmint/cinnamon-screensaver/issues/44Third Party Advisory
- http://advisories.mageia.org/MGASA-2014-0374.htmlThird Party Advisory
- http://seclists.org/oss-sec/2014/q1/327Mailing ListThird Party Advisory
- http://seclists.org/oss-sec/2014/q1/331Mailing ListThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:162Broken Link
- http://www.ubuntu.com/usn/USN-2475-1Third Party Advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759145Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1064695Issue Tracking
FAQ
What is CVE-2014-1949?
CVE-2014-1949 is a vulnerability with a CVSS score of 7.2 (HIGH). GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.
How severe is CVE-2014-1949?
CVE-2014-1949 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-1949?
Check the references section above for vendor advisories and patch information. Affected products include: Linuxmint Linux Mint, Gnome Gtk, Canonical Ubuntu.