Lucene search
AppleCVE-2014-1297HistoryApr 02, 2014 - 4:17 p.m.
CVE-2014-1297
2014-04-0216:17:06
CWE-20
apple
web.nvd.nist.gov
32
4
cve-2014-1297
webkit
apple safari
sandbox bypass
remote code execution
security vulnerability
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.004
Percentile
73.5%
WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.
Affected configurations
Node
applesafariRange≤6.1.2
ORapplesafariMatch6.0
ORapplesafariMatch6.0.1
ORapplesafariMatch6.0.2
ORapplesafariMatch6.0.3
ORapplesafariMatch6.0.4
ORapplesafariMatch6.0.5
ORapplesafariMatch6.1
ORapplesafariMatch6.1.1
ORapplesafariMatch7.0
ORapplesafariMatch7.0.1
ORapplesafariMatch7.0.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | safari | * | cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* |
| apple | safari | 6.0 | cpe:2.3:a:apple:safari:6.0:*:*:*:*:*:*:* |
| apple | safari | 6.0.1 | cpe:2.3:a:apple:safari:6.0.1:*:*:*:*:*:*:* |
| apple | safari | 6.0.2 | cpe:2.3:a:apple:safari:6.0.2:*:*:*:*:*:*:* |
| apple | safari | 6.0.3 | cpe:2.3:a:apple:safari:6.0.3:*:*:*:*:*:*:* |
| apple | safari | 6.0.4 | cpe:2.3:a:apple:safari:6.0.4:*:*:*:*:*:*:* |
| apple | safari | 6.0.5 | cpe:2.3:a:apple:safari:6.0.5:*:*:*:*:*:*:* |
| apple | safari | 6.1 | cpe:2.3:a:apple:safari:6.1:*:*:*:*:*:*:* |
| apple | safari | 6.1.1 | cpe:2.3:a:apple:safari:6.1.1:*:*:*:*:*:*:* |
| apple | safari | 7.0 | cpe:2.3:a:apple:safari:7.0:*:*:*:*:*:*:* |
Social References
More
Related
prion
prion
Design/Logic Flaw
2014-04-02 16:17:00
ubuntucve
ubuntucve
CVE-2014-1297
2014-04-02 00:00:00
cvelist
cvelist
CVE-2014-1297
2014-04-02 15:00:00
nvd
nvd
CVE-2014-1297
2014-04-02 16:17:06
openvas
openvas
securityvulns
securityvulns
APPLE-SA-2014-04-01-1 Safari 6.1.3 and Safari 7.0.3
2014-04-03 00:00:00
Apple Safari multiple security vulnerabilities
2014-04-03 00:00:00
WebKitGTK+ Security Advisory WSA-2015-0001
2015-02-02 00:00:00
nessus
nessus
Mac OS X : Apple Safari < 6.1.3 / 7.0.3 Multiple Vulnerabilities
2014-04-02 00:00:00
Safari < 6.1.3 / 7.0.3 Multiple Vulnerabilities
2014-04-10 00:00:00
RHEL 6 : webkitgtk (Unpatched Vulnerability)
2024-06-03 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.004
Percentile
73.5%
Related for CVE-2014-1297