CVE-2014-3202 Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.
MediumCVSS 4.4
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ayatana project unity | <= 7.2.0 | No fix listed |
| ayatana project unity | = 7.0.0 | No fix listed |
| ayatana project unity | = 7.0.1 | No fix listed |
| ayatana project unity | = 7.1.0 | No fix listed |
| ayatana project unity | = 7.1.1 | No fix listed |
| ayatana project unity | = 7.1.2 | No fix listed |
| ayatana project unity | = 7.1.3 | No fix listed |
References
- [oss-security] 20140426 Ubuntu 14.04: security problem in the lock screen mailing-list
- [oss-security] 20140426 Re: Ubuntu 14.04: security problem in the lock screen mailing-list
- [oss-security] 20140429 Re: Ubuntu 14.04: security problem in the lock screen mailing-list
- [oss-security] 20140503 Re: Ubuntu 14.04: security problem in the lock screen mailing-list
- bugs.launchpad.net
- bugs.launchpad.net exploit