GCVE - cpe:2.3:a:xscreensaver:xscreensaver:4.14:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:xscreensaver:xscreensaver:4.14:*:*:*:*:*:*:*

part: a version: 4.14 update: *

Vendor	Xscreensaver (`6f75762e-cedb-5c78-9e38-2bacd3273c8f`)
Product	Xscreensaver (`866eb800-234c-5c4e-a359-90388d08cb36`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:deb/debian/xscreensaver`	purl2cpe	2026-06-01 10:12:32.938361
`pkg:deb/ubuntu/xscreensaver`	purl2cpe	2026-06-01 10:12:32.938362
`pkg:github/zygo/xscreensaver`	purl2cpe	2026-06-01 10:12:32.938364
`pkg:rpm/fedora/xscreensaver`	purl2cpe	2026-06-01 10:12:32.938365
`pkg:rpm/opensuse/xscreensaver`	purl2cpe	2026-06-01 10:12:32.938367

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2004-2655`	vulnerable	2026-06-08 04:48:10.470559	Details available rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen. Published: 2006-04-08T01:00:00.000Z Updated: 2024-08-08T01:36:24.369Z Open on db.gcve.eu Reference links http://www.jwz.org/xscreensaver/changelog.html http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm http://www.derkeiler.com/Newsgroups/comp.os.linux.security/2004-08/0018.html http://www.novell.com/linux/security/advisories/2006_23_sr.html http://www.mandriva.com/security/advisories?name=MDKSA-2006:071	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0885`	vulnerable	2026-06-08 04:47:22.789823	Details available Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the (1) apple2, (2) xanalogtv, and (3) pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack. Published: 2006-02-28T01:00:00.000Z Updated: 2024-08-08T02:05:12.644Z Open on db.gcve.eu Reference links http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=182286 http://bugs.gentoo.org/show_bug.cgi?id=41253	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.