CVE-2014-1294

Опубликовано: 14 мар. 2014

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292, and CVE-2014-1293.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html
http://support.apple.com/kb/HT6162
Vendor Advisory
http://support.apple.com/kb/HT6163
Vendor Advisory
https://support.apple.com/kb/HT6537
http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html
http://support.apple.com/kb/HT6162
Vendor Advisory
http://support.apple.com/kb/HT6163
Vendor Advisory
https://support.apple.com/kb/HT6537

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 6.0.2 (включая)

cpe:2.3:o:apple:tvos:6.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:6.0.1:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 7.0.6 (включая)

cpe:2.3:o:apple:iphone_os:7.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:7.0.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:7.0.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:7.0.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:7.0.4:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:7.0.5:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01795

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-xxcm-mh46-4jpv

github

около 3 лет назад