« Volver al listado

CVE-2014-3204

Estado: ModificadaMedia (4.4)—

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Ayatana Project — UnityCanonical — Ubuntu Linux

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3204",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.4,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security@ubuntu.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-06T14:55:06.120",
  "references": [
    {
      "url": "http://ubuntu.com/usn/usn-2184-1",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@ubuntu.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/04/29/2",
      "source": "security@ubuntu.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/05/03/1",
      "source": "security@ubuntu.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/67117",
      "source": "security@ubuntu.com"
    },
    {
      "url": "https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885",
      "tags": [
        "Exploit"
      ],
      "source": "security@ubuntu.com"
    },
    {
      "url": "http://ubuntu.com/usn/usn-2184-1",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/04/29/2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2014/05/03/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/67117",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys."
    },
    {
      "lang": "es",
      "value": "Unity anterior a 7.2.1, utilizado en Ubuntu 14.04, no maneja debidamente accesos directos de teclado, lo que permite a atacantes físicamente próximos evadir la pantalla de bloqueo y ejecutar comandos arbitrarios, tal y como fue demostrado presionando el botón derecho en la barra de indicador y posteriormente presionando las teclas ALT y F2."
    }
  ],
  "lastModified": "2026-06-17T00:07:47.993",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1170F9BB-9FFB-407F-B8D3-F8417383021F",
              "versionEndIncluding": "7.2.0"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "982E87CF-26D7-4D2F-AA5F-57798C2F4D33"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5CD4318-783D-4428-815B-DD2C6F912C3F"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2562307E-490C-485E-9C1A-4A569565270F"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35E3A65D-6F6F-4457-A836-89A54CEDB9D9"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A052C0C4-4408-4014-AE8F-F894AB04BF1F"
            },
            {
              "criteria": "cpe:2.3:a:ayatana_project:unity:7.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07D5E8C8-34DD-4EA0-B686-2088F5C11122"
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@ubuntu.com"
}