CVE-2014-3202
Severity Score
4.4
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.
Unity anterior a 7.2.1 no maneja debidamente activación de entrada, lo que permite a atacantes físicamente próximos evadir la pantalla de bloqueo mediante la presión continua sobre la tecla ENTER, lo que provoca la caída del proceso.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-05-03 CVE Reserved
- 2014-05-06 CVE Published
- 2024-05-04 EPSS Updated
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2014/04/26/1 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2014/04/26/2 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2014/04/29/2 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2014/05/03/1 | Mailing List |
|
| https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308572 | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| https://bugs.launchpad.net/unity/+bug/1308750 | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ayatana Project Search vendor "Ayatana Project" | Unity Search vendor "Ayatana Project" for product "Unity" | <= 7.2.0 Search vendor "Ayatana Project" for product "Unity" and version " <= 7.2.0" | - |
Affected
| ||||||
| Ayatana Project Search vendor "Ayatana Project" | Unity Search vendor "Ayatana Project" for product "Unity" | 7.0.0 Search vendor "Ayatana Project" for product "Unity" and version "7.0.0" | - |
Affected
| ||||||
| Ayatana Project Search vendor "Ayatana Project" | Unity Search vendor "Ayatana Project" for product "Unity" | 7.0.1 Search vendor "Ayatana Project" for product "Unity" and version "7.0.1" | - |
Affected
| ||||||
| Ayatana Project Search vendor "Ayatana Project" | Unity Search vendor "Ayatana Project" for product "Unity" | 7.1.0 Search vendor "Ayatana Project" for product "Unity" and version "7.1.0" | - |
Affected
| ||||||
| Ayatana Project Search vendor "Ayatana Project" | Unity Search vendor "Ayatana Project" for product "Unity" | 7.1.1 Search vendor "Ayatana Project" for product "Unity" and version "7.1.1" | - |
Affected
| ||||||
| Ayatana Project Search vendor "Ayatana Project" | Unity Search vendor "Ayatana Project" for product "Unity" | 7.1.2 Search vendor "Ayatana Project" for product "Unity" and version "7.1.2" | - |
Affected
| ||||||
| Ayatana Project Search vendor "Ayatana Project" | Unity Search vendor "Ayatana Project" for product "Unity" | 7.1.3 Search vendor "Ayatana Project" for product "Unity" and version "7.1.3" | - |
Affected
| ||||||