Description
xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
xscreensaver xscreensaver
before 5.14affected
References
- https://security-tracker.debian.org/tracker/CVE-2011-2187 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2187 ↗
- https://access.redhat.com/security/cve/cve-2011-2187 ↗
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627382 ↗
- https://www.openwall.com/lists/oss-security/2011/06/06/17 ↗
- https://www.jwz.org/xscreensaver/changelog.html ↗