CVE-1999-1454: Medium severity Macromedia Matrix Screen Saver vulnerability
Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC (Escape) key.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Macromedia Matrix Screen Saverfrom your environment.Uninstall the Macromedia Matrix Screen Saver if it is not required.
- Configuration
Disable the 'Password protected' option in the Macromedia Matrix Screen Saver settings (do not rely on the screensaver's built-in password protection).
Macromedia Matrix Screen Saver Password protected = disabled - Compensating control
Restrict physical access to affected machines (lock rooms, secure consoles) and ensure unattended machines are physically secured, since attackers with physical access can bypass the screensaver password prompt.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1454?
CVE-1999-1454 is considered to be of low severity because it requires physical access to the machine.
How do I fix CVE-1999-1454?
To fix CVE-1999-1454, disable the password protection feature in the Macromedia Matrix Screen Saver settings.
Which versions of Macromedia Matrix Screen Saver are affected by CVE-1999-1454?
CVE-1999-1454 affects all versions of the Macromedia Matrix Screen Saver that have the password protection option enabled.
Who is affected by CVE-1999-1454?
Users of the Macromedia Matrix Screen Saver on Windows 95 are affected by CVE-1999-1454.
What type of attack is possible with CVE-1999-1454?
CVE-1999-1454 allows an attacker with physical access to easily bypass the password prompt by pressing the ESC key.