CVE-2014-3202

Summary

Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2014/04/29/2
• http://www.openwall.com/lists/oss-security/2014/05/03/1
• https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308572
• https://bugs.launchpad.net/unity/+bug/1308750
• http://www.openwall.com/lists/oss-security/2014/04/26/1
• http://www.openwall.com/lists/oss-security/2014/04/26/2

References

• http://www.openwall.com/lists/oss-security/2014/04/29/2
• http://www.openwall.com/lists/oss-security/2014/05/03/1
• https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308572
• https://bugs.launchpad.net/unity/+bug/1308750
• http://www.openwall.com/lists/oss-security/2014/04/26/1
• http://www.openwall.com/lists/oss-security/2014/04/26/2

• ←Previous
• Next→