NVD

Id
31445  
Name
CVE-2014-3203  
Description
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-05-06  
Modified Date
2014-05-07  
Seq
2014-3203  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164975 31445 CVE-2014-3203 USN-2184-1  View
164976 31445 CVE-2014-3203 [oss-security] 20140429 Re: Ubuntu 14.04: security problem in the lock screen  View
164977 31445 CVE-2014-3203 [oss-security] 20140503 Re: Ubuntu 14.04: security problem in the lock screen  View
164978 31445 CVE-2014-3203 https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308850  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13527 JVNDB-2014-002402 Ubuntu で使用される Unity におけるロック画面を回避される脆弱性 Ubuntu で使用される Unity は、ロック画面がアクティブな場合、Dash へのアクセスを適切に制限しないため、ロック画面を回避され、任意のコマンドを実行される脆弱性が存在します。 CVE-2014-3203 70490 CVE-2014-3203 31445 4.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002402.html 2014-04-29 2014-05-08 View