Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2014-3203

EPSS 0.07% · P22
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2014-3203

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Canonical Ubuntu Unity 权限许可和访问控制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Canonical Unity是英国科能(Canonical)公司为GNOME桌面环境所开发的一个图形用户界面,它用于Ubuntu操作系统。 Ubuntu 14.04版本中使用的Unity 7.2.0及之前的版本存在安全漏洞,该漏洞源于当锁定屏幕时,程序没有正确限制对Dash的访问。攻击者可通过在屏幕自动锁定之前按住SUPER键利用该漏洞绕过锁定屏幕,执行任意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2014-3203

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2014-3203

登录查看更多情报信息。

Same Patch Batch · n/a · 2014-05-06 · 10 CVEs total

CVE-2013-7353libpng 整数溢出漏洞
CVE-2013-7354libpng 数字错误漏洞
CVE-2014-0193Netty WebSocket08FrameDecoder 资源管理错误漏洞
CVE-2014-2558WordPress File Gallery插件‘create_function’函数代码注入漏洞
CVE-2014-3202Canonical Unity 权限许可和访问控制漏洞
CVE-2014-3204Canonical Ubuntu Unity 权限许可和访问控制漏洞
CVE-2014-0185PHP FastCGI Process Manager 权限许可和访问控制问题漏洞
CVE-2014-0198OpenSSL‘do_ssl3_write’函数缓冲区错误漏洞
CVE-2014-1736Google Chrome Google V8 整数溢出漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2014-3203

No comments yet


Leave a comment