CVE-2011-2187

· HIGHModified

← All CVEs

CVSS v3.1

7.8

EPSS

0.48%

Published

Nov 27, 2019

Modified

Nov 20, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-306

Affected Products (4)

xscreensaver_project · xscreensaver (up to 5.14)vulnerable

debian · debian_linuxvulnerable

References (12)

https://access.redhat.com/security/cve/cve-2011-2187

Third Party Advisory

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627382

ExploitThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2187

ExploitIssue TrackingThird Party Advisory

https://security-tracker.debian.org/tracker/CVE-2011-2187

Third Party Advisory

https://www.jwz.org/xscreensaver/changelog.html

Release NotesVendor Advisory

https://www.openwall.com/lists/oss-security/2011/06/06/17

Mailing ListThird Party Advisory

https://access.redhat.com/security/cve/cve-2011-2187

Third Party Advisory

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627382

ExploitThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2187

ExploitIssue TrackingThird Party Advisory

https://security-tracker.debian.org/tracker/CVE-2011-2187

Third Party Advisory

https://www.jwz.org/xscreensaver/changelog.html

Release NotesVendor Advisory

https://www.openwall.com/lists/oss-security/2011/06/06/17

Mailing ListThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs