CVE-2014-3204
published 2014-05-06CVE-2014-3204: Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen…
PriorityP427medium4.4CVSS 2.0
AVLACMAuNCPIPAP
EPSS
0.48%
38.5th percentile
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ayatana_project | unity | <= 7.2.0 | — |
| ayatana_project | unity | — | — |
| ayatana_project | unity | — | — |
| ayatana_project | unity | — | — |
| ayatana_project | unity | — | — |
| ayatana_project | unity | — | — |
| ayatana_project | unity | — | — |
| canonical | ubuntu_linux | — | — |
| dell | unity | >= 0 < 7.2.0+14.04.20140423-0ubuntu1.1 | 7.2.0+14.04.20140423-0ubuntu1.1 |
CVSS provenance
nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
osv4.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-qc2w-7hh9-mj28: Unity before 7
ghsa_unreviewed·2022-05-17
CVE-2014-3204 [MEDIUM] GHSA-qc2w-7hh9-mj28: Unity before 7
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.
OSV
CVE-2014-3204: Unity before 7
osv·2014-05-06·CVSS 4.4
CVE-2014-3204 [MEDIUM] CVE-2014-3204: Unity before 7
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://ubuntu.com/usn/usn-2184-1http://www.openwall.com/lists/oss-security/2014/04/29/2http://www.openwall.com/lists/oss-security/2014/05/03/1http://www.securityfocus.com/bid/67117https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885http://ubuntu.com/usn/usn-2184-1http://www.openwall.com/lists/oss-security/2014/04/29/2http://www.openwall.com/lists/oss-security/2014/05/03/1http://www.securityfocus.com/bid/67117https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885
2014-05-06
Published