« Volver al listado

CVE-2014-3202

Estado: ModificadaMedia (4.4)—

Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Ayatana Project — Unity

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3202",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.4,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security@ubuntu.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-06T14:55:05.917",
  "references": [
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/04/26/1",
      "source": "security@ubuntu.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/04/26/2",
      "source": "security@ubuntu.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/04/29/2",
      "source": "security@ubuntu.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/05/03/1",
      "source": "security@ubuntu.com"
    },
    {
      "url": "https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308572",
      "source": "security@ubuntu.com"
    },
    {
      "url": "https://bugs.launchpad.net/unity/+bug/1308750",
      "tags": [
        "Exploit"
      ],
      "source": "security@ubuntu.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/04/26/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/04/26/2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/04/29/2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/05/03/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308572",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.launchpad.net/unity/+bug/1308750",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash."
    },
    {
      "lang": "es",
      "value": "Unity anterior a 7.2.1 no maneja debidamente activación de entrada, lo que permite a atacantes físicamente próximos evadir la pantalla de bloqueo mediante la presión continua sobre la tecla ENTER, lo que provoca la caída del proceso."
    }
  ],
  "lastModified": "2026-06-17T00:07:47.790",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1170F9BB-9FFB-407F-B8D3-F8417383021F",
              "versionEndIncluding": "7.2.0"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "982E87CF-26D7-4D2F-AA5F-57798C2F4D33"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5CD4318-783D-4428-815B-DD2C6F912C3F"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2562307E-490C-485E-9C1A-4A569565270F"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35E3A65D-6F6F-4457-A836-89A54CEDB9D9"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A052C0C4-4408-4014-AE8F-F894AB04BF1F"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07D5E8C8-34DD-4EA0-B686-2088F5C11122"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@ubuntu.com"
}