← Back to branch summary

~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to retired/CVE-2014-3204

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
retired/CVE-2014-3204
1
 
Candidate: CVE-2014-3204
2
 
PublicDate: 2014-05-06
3
 
References:
4
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3204
5
 
 http://www.openwall.com/lists/oss-security/2014/05/03/1
6
 
 http://www.openwall.com/lists/oss-security/2014/04/29/2
7
 
 https://usn.ubuntu.com/usn/usn-2184-1
8
 
Description:
9
 
 Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle
10
 
 keyboard shortcuts, which allows physically proximate attackers to bypass
11
 
 the lock screen and execute arbitrary commands, as demonstrated by
12
 
 right-clicking on the indicator bar and then pressing the ALT and F2 keys.
13
 
Ubuntu-Description:
14
 
Notes:
15
 
Bugs:
16
 
 https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1313885
17
 
Priority: medium
18
 
Discovered-by:
19
 
Assigned-to:
20
 
 
21
 
Patches_unity:
22
 
upstream_unity: needs-triage
23
 
lucid_unity: DNE
24
 
precise_unity: not-affected
25
 
quantal_unity: not-affected
26
 
saucy_unity: not-affected
27
 
trusty_unity: released (7.2.0+14.04.20140423-0ubuntu1.1)
28
 
devel_unity: not-affected