Lucene search
AppleCVE-2014-1304HistoryApr 02, 2014 - 4:17 p.m.
CVE-2014-1304
2014-04-0216:17:06
CWE-119
apple
web.nvd.nist.gov
27
cve-2014-1304
webkit
apple safari
remote code execution
memory corruption
application crash
nvd
vulnerability
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
High
EPSS
0.011
Percentile
84.2%
WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1.
Affected configurations
Node
applesafariRange≤6.1.2
ORapplesafariMatch6.0
ORapplesafariMatch6.0.1
ORapplesafariMatch6.0.2
ORapplesafariMatch6.0.3
ORapplesafariMatch6.0.4
ORapplesafariMatch6.0.5
ORapplesafariMatch6.1
ORapplesafariMatch6.1.1
ORapplesafariMatch7.0
ORapplesafariMatch7.0.1
ORapplesafariMatch7.0.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | safari | * | cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* |
| apple | safari | 6.0 | cpe:2.3:a:apple:safari:6.0:*:*:*:*:*:*:* |
| apple | safari | 6.0.1 | cpe:2.3:a:apple:safari:6.0.1:*:*:*:*:*:*:* |
| apple | safari | 6.0.2 | cpe:2.3:a:apple:safari:6.0.2:*:*:*:*:*:*:* |
| apple | safari | 6.0.3 | cpe:2.3:a:apple:safari:6.0.3:*:*:*:*:*:*:* |
| apple | safari | 6.0.4 | cpe:2.3:a:apple:safari:6.0.4:*:*:*:*:*:*:* |
| apple | safari | 6.0.5 | cpe:2.3:a:apple:safari:6.0.5:*:*:*:*:*:*:* |
| apple | safari | 6.1 | cpe:2.3:a:apple:safari:6.1:*:*:*:*:*:*:* |
| apple | safari | 6.1.1 | cpe:2.3:a:apple:safari:6.1.1:*:*:*:*:*:*:* |
| apple | safari | 7.0 | cpe:2.3:a:apple:safari:7.0:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2014-1304
2014-04-02 15:00:00
prion
prion
Memory corruption
2014-04-02 16:17:00
nvd
nvd
CVE-2014-1304
2014-04-02 16:17:06
ubuntucve
ubuntucve
CVE-2014-1304
2014-04-02 00:00:00
openvas
openvas
securityvulns
securityvulns
APPLE-SA-2014-04-22-2 iOS 7.1.1
2014-05-04 00:00:00
Apple iOS multiple security vulnerabilities
2014-05-04 00:00:00
APPLE-SA-2014-04-22-3 Apple TV 6.1.1
2014-05-04 00:00:00
nessus
nessus
Apple TV < 6.1.1 Multiple Vulnerabilities
2014-05-29 00:00:00
Safari < 6.1.3 / 7.0.3 Multiple Vulnerabilities
2014-04-10 00:00:00
Mac OS X : Apple Safari < 6.1.3 / 7.0.3 Multiple Vulnerabilities
2014-04-02 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
High
EPSS
0.011
Percentile
84.2%
Related for CVE-2014-1304