High severity7.8NVD Advisory· Published Nov 27, 2019· Updated Jun 16, 2026

CVE-2011-2187

Description

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xscreensaver/Xscreensaver3 versions
cpe:2.3:a:xscreensaver_project:xscreensaver:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:xscreensaver_project:xscreensaver:*:*:*:*:*:*:*:*range: <5.14
- (no CPE)range: <5.14
- (no CPE)range: before 5.14
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

bugs.debian.org/cgi-bin/bugreport.cginvdExploitThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingThird Party Advisory
access.redhat.com/security/cve/cve-2011-2187nvdThird Party Advisory
security-tracker.debian.org/tracker/CVE-2011-2187nvdThird Party Advisory
www.jwz.org/xscreensaver/changelog.htmlnvdRelease NotesVendor Advisory
www.openwall.com/lists/oss-security/2011/06/06/17nvdMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000