CVEvulnerability
CVE-2014-3202
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.
Affected configurations
• ayatana project unity (<= 7.2.0)
• ayatana project unity 7.0.0
• ayatana project unity 7.0.1
• ayatana project unity 7.1.0
• ayatana project unity 7.1.1
• ayatana project unity 7.1.2
• ayatana project unity 7.1.3
Related
Weakness · not in database (1)
References
- http://www.openwall.com/lists/oss-security/2014/04/26/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2014/04/26/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2014/04/29/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2014/05/03/1 www.openwall.com
- https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308572 bugs.launchpad.net
- https://bugs.launchpad.net/unity/+bug/1308750 Exploit
- http://www.openwall.com/lists/oss-security/2014/04/26/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2014/04/26/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2014/04/29/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2014/05/03/1 www.openwall.com
- https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308572 bugs.launchpad.net
- https://bugs.launchpad.net/unity/+bug/1308750 Exploit