PT-2014-6334 · Unity · Unity

Chris Weiss + 8 · Publicado 2014-07-31 · Atualizado 2017-09-08 · CVE-2014-5195

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Unity versions prior to 7.2.3 Unity versions 7.3.x prior to 7.3.1

Description The issue allows physically proximate attackers to bypass the lock screen by leveraging a machine that had text selected when locking or resuming from a suspension, due to Unity not properly taking focus of the keyboard when switching to the lock screen.

Recommendations For Unity versions prior to 7.2.3, update to version 7.2.3 or later. For Unity versions 7.3.x prior to 7.3.1, update to version 7.3.1 or later.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2014-5195

USN-2303-1

Produtos afetados

Unity

Referências · 12

• https://osv.dev/vulnerability/USN-2303-1 · Aviso do Fabricante
• https://bugs.launchpad.net/unity/7.2/+bug/1349128 · Nota
• http://securityfocus.com/bid/68987 · Nota
• https://ubuntu.com/security/notices/USN-2303-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-5195 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2014-5195 · Nota de Segurança
• http://osvdb.org/109788 · Nota
• http://ubuntu.com/usn/USN-2303-1 · Aviso do Fabricante
• https://launchpad.net/bugs/1349128 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-5195 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2014-5195 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95199 · Nota