CVE-2014-3204 (GCVE-0-2014-3204)
Vulnerability from cvelistv5 – Published: 2014-05-06 14:00 – Updated: 2024-08-06 10:35
VLAI
EPSS
VEX
Summary
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://www.openwall.com/lists/oss-security/2014/04/29/2 | mailing-listx_refsource_MLIST |
| http://www.securityfocus.com/bid/67117 | vdb-entryx_refsource_BID |
| http://www.openwall.com/lists/oss-security/2014/05/03/1 | mailing-listx_refsource_MLIST |
| https://bugs.launchpad.net/ubuntu/+source/unity/+… | x_refsource_CONFIRM |
| http://ubuntu.com/usn/usn-2184-1 | vendor-advisoryx_refsource_UBUNTU |
Date Public
2014-04-28 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T10:35:57.088Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "[oss-security] 20140429 Re: Ubuntu 14.04: security problem in the lock screen",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2014/04/29/2"
},
{
"name": "67117",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/67117"
},
{
"name": "[oss-security] 20140503 Re: Ubuntu 14.04: security problem in the lock screen",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2014/05/03/1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885"
},
{
"name": "USN-2184-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://ubuntu.com/usn/usn-2184-1"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2014-04-28T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2014-05-06T12:57:00.000Z",
"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
"shortName": "canonical"
},
"references": [
{
"name": "[oss-security] 20140429 Re: Ubuntu 14.04: security problem in the lock screen",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2014/04/29/2"
},
{
"name": "67117",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/67117"
},
{
"name": "[oss-security] 20140503 Re: Ubuntu 14.04: security problem in the lock screen",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2014/05/03/1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885"
},
{
"name": "USN-2184-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://ubuntu.com/usn/usn-2184-1"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@ubuntu.com",
"ID": "CVE-2014-3204",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "[oss-security] 20140429 Re: Ubuntu 14.04: security problem in the lock screen",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2014/04/29/2"
},
{
"name": "67117",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/67117"
},
{
"name": "[oss-security] 20140503 Re: Ubuntu 14.04: security problem in the lock screen",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2014/05/03/1"
},
{
"name": "https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885",
"refsource": "CONFIRM",
"url": "https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885"
},
{
"name": "USN-2184-1",
"refsource": "UBUNTU",
"url": "http://ubuntu.com/usn/usn-2184-1"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
"assignerShortName": "canonical",
"cveId": "CVE-2014-3204",
"datePublished": "2014-05-06T14:00:00.000Z",
"dateReserved": "2014-05-03T00:00:00.000Z",
"dateUpdated": "2024-08-06T10:35:57.088Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2014-3204",
"date": "2026-07-17",
"epss": "0.00477",
"percentile": "0.38114"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ayatana_project:unity:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"7.2.0\", \"matchCriteriaId\": \"1170F9BB-9FFB-407F-B8D3-F8417383021F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ayatana_project:unity:7.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"982E87CF-26D7-4D2F-AA5F-57798C2F4D33\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ayatana_project:unity:7.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B5CD4318-783D-4428-815B-DD2C6F912C3F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ayatana_project:unity:7.1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2562307E-490C-485E-9C1A-4A569565270F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ayatana_project:unity:7.1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"35E3A65D-6F6F-4457-A836-89A54CEDB9D9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ayatana_project:unity:7.1.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A052C0C4-4408-4014-AE8F-F894AB04BF1F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ayatana_project:unity:7.1.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"07D5E8C8-34DD-4EA0-B686-2088F5C11122\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"B5A6F2F3-4894-4392-8296-3B8DD2679084\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.\"}, {\"lang\": \"es\", \"value\": \"Unity anterior a 7.2.1, utilizado en Ubuntu 14.04, no maneja debidamente accesos directos de teclado, lo que permite a atacantes f\\u00edsicamente pr\\u00f3ximos evadir la pantalla de bloqueo y ejecutar comandos arbitrarios, tal y como fue demostrado presionando el bot\\u00f3n derecho en la barra de indicador y posteriormente presionando las teclas ALT y F2.\"}]",
"id": "CVE-2014-3204",
"lastModified": "2024-11-21T02:07:39.660",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:M/Au:N/C:P/I:P/A:P\", \"baseScore\": 4.4, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 3.4, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2014-05-06T14:55:06.120",
"references": "[{\"url\": \"http://ubuntu.com/usn/usn-2184-1\", \"source\": \"security@ubuntu.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2014/04/29/2\", \"source\": \"security@ubuntu.com\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2014/05/03/1\", \"source\": \"security@ubuntu.com\"}, {\"url\": \"http://www.securityfocus.com/bid/67117\", \"source\": \"security@ubuntu.com\"}, {\"url\": \"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885\", \"source\": \"security@ubuntu.com\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://ubuntu.com/usn/usn-2184-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2014/04/29/2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2014/05/03/1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/67117\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\"]}]",
"sourceIdentifier": "security@ubuntu.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-264\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2014-3204\",\"sourceIdentifier\":\"security@ubuntu.com\",\"published\":\"2014-05-06T14:55:06.120\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.\"},{\"lang\":\"es\",\"value\":\"Unity anterior a 7.2.1, utilizado en Ubuntu 14.04, no maneja debidamente accesos directos de teclado, lo que permite a atacantes f\u00edsicamente pr\u00f3ximos evadir la pantalla de bloqueo y ejecutar comandos arbitrarios, tal y como fue demostrado presionando el bot\u00f3n derecho en la barra de indicador y posteriormente presionando las teclas ALT y F2.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":4.4,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.4,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ayatana_project:unity:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"7.2.0\",\"matchCriteriaId\":\"1170F9BB-9FFB-407F-B8D3-F8417383021F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ayatana_project:unity:7.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"982E87CF-26D7-4D2F-AA5F-57798C2F4D33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ayatana_project:unity:7.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5CD4318-783D-4428-815B-DD2C6F912C3F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ayatana_project:unity:7.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2562307E-490C-485E-9C1A-4A569565270F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ayatana_project:unity:7.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"35E3A65D-6F6F-4457-A836-89A54CEDB9D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ayatana_project:unity:7.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A052C0C4-4408-4014-AE8F-F894AB04BF1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ayatana_project:unity:7.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07D5E8C8-34DD-4EA0-B686-2088F5C11122\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B5A6F2F3-4894-4392-8296-3B8DD2679084\"}]}]}],\"references\":[{\"url\":\"http://ubuntu.com/usn/usn-2184-1\",\"source\":\"security@ubuntu.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2014/04/29/2\",\"source\":\"security@ubuntu.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2014/05/03/1\",\"source\":\"security@ubuntu.com\"},{\"url\":\"http://www.securityfocus.com/bid/67117\",\"source\":\"security@ubuntu.com\"},{\"url\":\"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885\",\"source\":\"security@ubuntu.com\",\"tags\":[\"Exploit\"]},{\"url\":\"http://ubuntu.com/usn/usn-2184-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2014/04/29/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2014/05/03/1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/67117\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]}]}}"
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…