Lucene search
HistoryJul 01, 2014 - 10:17 a.m.
CVE-2014-1349
cve-2014-1349
safari
apple ios
vulnerability
remote attackers
arbitrary code
denial of service
application crash
invalid url
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.026 Low
EPSS
Percentile
90.4%
Use-after-free vulnerability in Safari in Apple iOS before 7.1.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an invalid URL.
Affected configurations
Node
appleiphone_osRange≤7.1.1
ORappleiphone_osMatch7.0
ORappleiphone_osMatch7.0.1
ORappleiphone_osMatch7.0.2
ORappleiphone_osMatch7.0.3
ORappleiphone_osMatch7.0.4
ORappleiphone_osMatch7.0.5
ORappleiphone_osMatch7.0.6
ORappleiphone_osMatch7.1
Related
prion
prion
Design/Logic Flaw
2014-07-01 10:17:00
cvelist
cvelist
CVE-2014-1349
2014-07-01 10:00:00
nvd
nvd
CVE-2014-1349
2014-07-01 10:17:26
securityvulns
securityvulns
APPLE-SA-2014-06-30-3 iOS 7.1.2
2014-08-04 00:00:00
Apple iOS multiple security vulnerabilities
2014-08-04 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.026 Low
EPSS
Percentile
90.4%
Related for CVE-2014-1349