Description
The gesture handling code in Clutter before 1.16.2 allows physically proximate attackers to bypass the lock screen via certain (1) mouse or (2) touch gestures.
References (5)
Core 5
Core References
Patch x_refsource_confirm
https://git.gnome.org/browse/clutter/commit/?h=clutter-1.18&id=97724939c8de004d7fa230f3ff64862d957f93a9
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1227098
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-1510.html
Issue Tracking x_refsource_confirm
https://bugzilla.gnome.org/show_bug.cgi?id=710227
Exploit x_refsource_misc
https://bugzilla.gnome.org/show_bug.cgi?id=749847
Scores
EPSS
0.0050
EPSS Percentile
39.1%
Details
CWE
CWE-284
Status
published
Products (1)
clutter_project/clutter
< 1.16.0
Published
Aug 12, 2015
Tracked Since
Feb 18, 2026