CVE-2014-3202: Medium severity Ayatana Project Unity vulnerability
Published May 6, 2014
·Updated
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.
Affected Software
7 affected components
Ayatana Project Unity<=7.2.0
Ayatana Project Unity=7.0.0
Ayatana Project Unity=7.0.1
Ayatana Project Unity=7.1.0
Ayatana Project Unity=7.1.1
Ayatana Project Unity=7.1.2
Ayatana Project Unity=7.1.3
Event History
May 6, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Who can exploit this issue?
An attacker must be physically proximate to the affected system and able to interact with its lock screen. The provided information does not indicate that remote exploitation is possible.
2
What action triggers the lock-screen bypass?
The issue is triggered by holding down the ENTER key at the lock screen, causing the relevant process to crash and bypassing the lock screen.
3
Which Unity versions are affected?
Unity versions before 7.2.1 are affected. Updating to Unity 7.2.1 or later addresses the affected version range.