GCVE - cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Gnome (`0ee6d85f-ce9a-5064-936c-231d12a60ad5`)
Product	Gtk (`7f4c5f4f-9bce-5eb2-b887-11d73972c7cc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/gtk-vnc`	purl2cpe	2026-06-01 10:17:21.366957
`pkg:deb/ubuntu/gtk-vnc`	purl2cpe	2026-06-01 10:17:21.366961
`pkg:github/gnome/gtk`	purl2cpe	2026-06-01 10:17:21.366965
`pkg:rpm/centos/gtk-vnc`	purl2cpe	2026-06-01 10:17:21.366968
`pkg:rpm/fedora/gtk-vnc`	purl2cpe	2026-06-01 10:17:21.366972
`pkg:rpm/opensuse/gtk-vnc`	purl2cpe	2026-06-01 10:17:21.366975

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-1949`	vulnerable	2026-06-08 05:05:26.911496	Details available GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button. Published: 2015-01-16T16:00:00.000Z Updated: 2024-08-06T09:58:15.992Z Open on db.gcve.eu Reference links http://seclists.org/oss-sec/2014/q1/327 http://www.ubuntu.com/usn/USN-2475-1 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759145 http://www.mandriva.com/security/advisories?name=MDVSA-2015:162 https://github.com/linuxmint/cinnamon-screensaver/issues/44	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4833`	vulnerable	2026-06-08 04:56:31.240912	Details available Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows local users to gain privileges via a Trojan horse uxtheme.dll file in the current working directory, a different vulnerability than CVE-2010-4831. Published: 2011-09-06T15:00:00.000Z Updated: 2024-08-07T04:02:29.603Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/49449 http://git.gnome.org/browse/gtk+/commit/modules/engines/ms-windows/xp_theme.c?h=gtk-2-24&id=d6e11a97e318158f5d210a0476870dfe14ed95e6 http://secunia.com/advisories/45815	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4831`	vulnerable	2026-06-08 04:56:31.236416	Details available Untrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows local users to gain privileges via a Trojan horse Wintab32.dll file in the current working directory. Published: 2011-09-06T15:00:00.000Z Updated: 2024-09-16T22:45:51.821Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/49449 http://git.gnome.org/browse/gtk+/commit/gdk/win32/gdkinput-win32.c?h=gtk-2-24&id=88f54ea47d4a55bbbf9e34a7a0502f365eb69ae5&ss=1 http://jvn.jp/en/jp/JVN58019849/index.html http://ftp.gnome.org/pub/gnome/sources/gtk+/2.21/gtk+-2.21.8.changes http://secunia.com/advisories/45815	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0732`	vulnerable	2026-06-08 04:52:04.163534	Details available gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times. Published: 2010-03-19T19:00:00.000Z Updated: 2024-08-07T00:59:38.691Z Open on db.gcve.eu Reference links http://secunia.com/advisories/39317 http://www.openwall.com/lists/oss-security/2010/02/12/1 http://www.openwall.com/lists/oss-security/2010/03/16/9 http://www.securityfocus.com/bid/38211 https://bugzilla.redhat.com/show_bug.cgi?id=565527	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0010`	vulnerable	2026-06-08 04:49:31.115235	Details available The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file. Published: 2007-01-24T19:00:00.000Z Updated: 2024-08-07T12:03:36.854Z Open on db.gcve.eu Reference links http://secunia.com/advisories/23984 http://secunia.com/advisories/24095 http://www.redhat.com/support/errata/RHSA-2007-0019.html https://issues.rpath.com/browse/RPL-984 http://secunia.com/advisories/23933	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2976`	vulnerable	2026-06-08 04:48:31.043314	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2975`	vulnerable	2026-06-08 04:48:31.041649	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0891`	vulnerable	2026-06-08 04:48:13.903841	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0372`	vulnerable	2026-06-08 04:48:12.477193	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0788`	vulnerable	2026-06-08 04:47:51.178692	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0753`	vulnerable	2026-06-08 04:47:51.101552	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.