CVE-2014-3204

Unity < 7.2.1 - Lock Screen Bypass via Keyboard Shortcut Manipulation

Title source: llm
STIX 2.1

Description

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.

References (5)

Core 5
Core References
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/04/29/2
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/67117
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/05/03/1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://ubuntu.com/usn/usn-2184-1

Scores

EPSS 0.0048
EPSS Percentile 38.2%

Details

CWE
CWE-264
Status published
Products (8)
ayatana_project/unity 7.0.0
ayatana_project/unity 7.0.1
ayatana_project/unity 7.1.0
ayatana_project/unity 7.1.1
ayatana_project/unity 7.1.2
ayatana_project/unity 7.1.3
ayatana_project/unity < 7.2.0
canonical/ubuntu_linux 14.04
Published May 06, 2014
Tracked Since Feb 18, 2026