CVE-2014-3204
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which...
CVE-2014-3204 is a medium vulnerability (CVSS 4.4) in Ayatana Project Unity, published May 6, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. Fixed in unity 7.2.0+14.04.20140423-0ubuntu1.1.
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.
Exploit likelihood
What each source reports
NVD Score used
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.
- Record
CVE-2014-3204- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.
- Record
CVE-2014-3204- Updated
- 2026-11-02
EUVDEUVD-2014-3222 No score
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.
- Record
EUVD-2014-3222- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qc2w-7hh9-mj28 No score
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which...
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.
- Record
GHSA-qc2w-7hh9-mj28- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-3204 No score
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys.
- Record
UBUNTU-CVE-2014-3204- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
unityUbuntu:14.04:LTS |
before 7.2.0+14.04.20140423-0ubuntu1.1, plus listed versions 7.1.2+13.10.20131014.1-0ubuntu17.1.2+14.04.20131106.1-0ubuntu17.1.2+14.04.20131106.1-0ubuntu27.1.2+14.04.20131106.1-0ubuntu47.1.2+14.04.20131106.1-0ubuntu5 Show 23 moreShow less7.1.2+14.04.20140214.1-0ubuntu17.1.2+14.04.20140217-0ubuntu17.1.2+14.04.20140218.1-0ubuntu17.1.2+14.04.20140218.1-0ubuntu27.1.2+14.04.20140220-0ubuntu17.1.2+14.04.20140228-0ubuntu17.1.2+14.04.20140303-0ubuntu17.1.2+14.04.20140305-0ubuntu17.1.2+14.04.20140311-0ubuntu17.1.2+14.04.20140312-0ubuntu17.1.2+14.04.20140313-0ubuntu17.1.2+14.04.20140318-0ubuntu17.1.2+14.04.20140320.1-0ubuntu17.1.2+14.04.20140321-0ubuntu17.1.2+14.04.20140328.1-0ubuntu17.2.0+14.04.20140402-0ubuntu17.2.0+14.04.20140403-0ubuntu17.2.0+14.04.20140404-0ubuntu17.2.0+14.04.20140410-0ubuntu17.2.0+14.04.20140410.1-0ubuntu17.2.0+14.04.20140411-0ubuntu17.2.0+14.04.20140414.1-0ubuntu17.2.0+14.04.20140416-0ubuntu1 |
7.2.0+14.04.20140423-0ubuntu1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |