CVE-2014-3204 in Linux
Summary
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
05/03/2014
Disclosure
05/06/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13152 | Ubuntu Linux Lock Screen access control | 264 | Proof-of-Concept | Official fix | CVE-2014-3204 |