Vulnerability Details CVE-2014-3202
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.8%
CVSS Severity
CVSS v2 Score 4.4
References
- http://www.openwall.com/lists/oss-security/2014/04/26/1
- http://www.openwall.com/lists/oss-security/2014/04/26/2
- http://www.openwall.com/lists/oss-security/2014/04/29/2
- http://www.openwall.com/lists/oss-security/2014/05/03/1
- https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308572
- https://bugs.launchpad.net/unity/+bug/1308750
- http://www.openwall.com/lists/oss-security/2014/04/26/1
- http://www.openwall.com/lists/oss-security/2014/04/26/2
- http://www.openwall.com/lists/oss-security/2014/04/29/2
- http://www.openwall.com/lists/oss-security/2014/05/03/1
- https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308572
- https://bugs.launchpad.net/unity/+bug/1308750
Products affected by CVE-2014-3202
-
cpe:2.3:a:ayatana_project:unity:7.0.0
-
cpe:2.3:a:ayatana_project:unity:7.0.1
-
cpe:2.3:a:ayatana_project:unity:7.1.0
-
cpe:2.3:a:ayatana_project:unity:7.1.1
-
cpe:2.3:a:ayatana_project:unity:7.1.2
-
cpe:2.3:a:ayatana_project:unity:7.1.3
-
cpe:2.3:a:ayatana_project:unity:7.2.0