CVE-2014-3202
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate...
CVE-2014-3202 is a medium vulnerability (CVSS 4.4) in Ayatana Project Unity, published May 6, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 37th percentile. Fixed in unity 7.2.0+14.04.20140416-0ubuntu1.
- Severity
- 4.4 MediumCVSS 2.0, NVD
- Exploit chance
- 0.42%EPSS, 37th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
7.2.0+14.04.20140416-0ubuntu1unity
Description
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
unityUbuntu:14.04:LTS | before 7.2.0+14.04.20140416-0ubuntu1, plus listed versions 7.1.2+13.10.20131014.1-0ubuntu17.1.2+14.04.20131106.1-0ubuntu17.1.2+14.04.20131106.1-0ubuntu27.1.2+14.04.20131106.1-0ubuntu47.1.2+14.04.20131106.1-0ubuntu5 Show 22 moreShow less7.1.2+14.04.20140214.1-0ubuntu17.1.2+14.04.20140217-0ubuntu17.1.2+14.04.20140218.1-0ubuntu17.1.2+14.04.20140218.1-0ubuntu27.1.2+14.04.20140220-0ubuntu17.1.2+14.04.20140228-0ubuntu17.1.2+14.04.20140303-0ubuntu17.1.2+14.04.20140305-0ubuntu17.1.2+14.04.20140311-0ubuntu17.1.2+14.04.20140312-0ubuntu17.1.2+14.04.20140313-0ubuntu17.1.2+14.04.20140318-0ubuntu17.1.2+14.04.20140320.1-0ubuntu17.1.2+14.04.20140321-0ubuntu17.1.2+14.04.20140328.1-0ubuntu17.2.0+14.04.20140402-0ubuntu17.2.0+14.04.20140403-0ubuntu17.2.0+14.04.20140404-0ubuntu17.2.0+14.04.20140410-0ubuntu17.2.0+14.04.20140410.1-0ubuntu17.2.0+14.04.20140411-0ubuntu17.2.0+14.04.20140414.1-0ubuntu1 | 7.2.0+14.04.20140416-0ubuntu1 |
What each source reports
NVD Score used
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.
- Record
CVE-2014-3202- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.
- Record
CVE-2014-3202- Updated
- 2026-11-02
EUVDEUVD-2014-3220No score
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.
- Record
EUVD-2014-3220- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g93h-xxm7-w7m7No score
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate...
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.
- Record
GHSA-g93h-xxm7-w7m7- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-3202No score
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.
- Record
UBUNTU-CVE-2014-3202- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.