CVE-2014-1949

Published: 16 January 2015

GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.

Notes

although this issue was reported against cinnamon-screensaver,
the actual problem lies in gtk+3.0, and also affects
gnome-screensaver

Status

References

• http://www.openwall.com/lists/oss-security/2014/02/12/7
• https://www.cve.org/CVERecord?id=CVE-2014-1949
• NVD
• Launchpad
• Debian

Bugs

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=738828
• https://bugs.launchpad.net/ubuntu/+source/gtk+3.0/+bug/1366790