{"api_version":"1","generated_at":"2026-07-23T04:53:06+00:00","cve":"CVE-2014-3203","urls":{"html":"https://cve.report/CVE-2014-3203","api":"https://cve.report/api/cve/CVE-2014-3203.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-3203","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-3203"},"summary":{"title":"CVE-2014-3203","description":"Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks.","state":"PUBLISHED","assigner":"canonical","published_at":"2014-05-06 14:55:06","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.4","severity":"","vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://ubuntu.com/usn/usn-2184-1","name":"http://ubuntu.com/usn/usn-2184-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"USN-2184-1: Unity vulnerabilities | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2014/05/03/1","name":"http://www.openwall.com/lists/oss-security/2014/05/03/1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: Ubuntu 14.04: security problem in the lock screen","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2014/04/29/2","name":"http://www.openwall.com/lists/oss-security/2014/04/29/2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: Ubuntu 14.04: security problem in the lock screen","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308850","name":"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308850","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Bug #1308850 “Dash is visible on top of the lockscreen after scr...” : Bugs : “unity” package : Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3203","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3203","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"3203","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ayatana_project","cpe5":"unity","cpe6":"7.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3203","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ayatana_project","cpe5":"unity","cpe6":"7.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3203","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ayatana_project","cpe5":"unity","cpe6":"7.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3203","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ayatana_project","cpe5":"unity","cpe6":"7.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3203","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ayatana_project","cpe5":"unity","cpe6":"7.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3203","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ayatana_project","cpe5":"unity","cpe6":"7.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3203","vulnerable":"1","versionEndIncluding":"7.2.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ayatana_project","cpe5":"unity","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3203","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"14.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"lts","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T10:35:56.995Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308850"},{"name":"[oss-security] 20140429 Re: Ubuntu 14.04: security problem in the lock screen","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2014/04/29/2"},{"name":"[oss-security] 20140503 Re: Ubuntu 14.04: security problem in the lock screen","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2014/05/03/1"},{"name":"USN-2184-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://ubuntu.com/usn/usn-2184-1"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-04-17T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2014-05-06T12:57:00.000Z","orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308850"},{"name":"[oss-security] 20140429 Re: Ubuntu 14.04: security problem in the lock screen","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2014/04/29/2"},{"name":"[oss-security] 20140503 Re: Ubuntu 14.04: security problem in the lock screen","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2014/05/03/1"},{"name":"USN-2184-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://ubuntu.com/usn/usn-2184-1"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@ubuntu.com","ID":"CVE-2014-3203","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308850","refsource":"CONFIRM","url":"https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308850"},{"name":"[oss-security] 20140429 Re: Ubuntu 14.04: security problem in the lock screen","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2014/04/29/2"},{"name":"[oss-security] 20140503 Re: Ubuntu 14.04: security problem in the lock screen","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2014/05/03/1"},{"name":"USN-2184-1","refsource":"UBUNTU","url":"http://ubuntu.com/usn/usn-2184-1"}]}}}},"cveMetadata":{"assignerOrgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","assignerShortName":"canonical","cveId":"CVE-2014-3203","datePublished":"2014-05-06T14:00:00.000Z","dateReserved":"2014-05-03T00:00:00.000Z","dateUpdated":"2024-08-06T10:35:56.995Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-05-06 14:55:06","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ayatana_project:unity:*:*:*:*:*:*:*:*","versionEndIncluding":"7.2.0","matchCriteriaId":"1170F9BB-9FFB-407F-B8D3-F8417383021F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ayatana_project:unity:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"982E87CF-26D7-4D2F-AA5F-57798C2F4D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ayatana_project:unity:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B5CD4318-783D-4428-815B-DD2C6F912C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ayatana_project:unity:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2562307E-490C-485E-9C1A-4A569565270F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ayatana_project:unity:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"35E3A65D-6F6F-4457-A836-89A54CEDB9D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ayatana_project:unity:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A052C0C4-4408-4014-AE8F-F894AB04BF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ayatana_project:unity:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"07D5E8C8-34DD-4EA0-B686-2088F5C11122"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"3203","Ordinal":"1","Title":"CVE-2014-3203","CVE":"CVE-2014-3203","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"3203","Ordinal":"1","NoteData":"Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks.","Type":"Description","Title":"CVE-2014-3203"},{"CveYear":"2014","CveId":"3203","Ordinal":"2","NoteData":"2014-05-06","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"3203","Ordinal":"3","NoteData":"2014-05-06","Type":"Other","Title":"Modified"}]}}}