Lucene search
HistoryDec 10, 2014 - 9:59 p.m.
CVE-2014-4465
cve-2014-4465
webkit
apple safari
same origin policy
css
svg
img
remote attackers
nvd
6.1 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
73.4%
WebKit in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1 allows remote attackers to bypass the Same Origin Policy via crafted Cascading Style Sheets (CSS) token sequences within an SVG file in the SRC attribute of an IMG element.
Related
prion
prion
Design/Logic Flaw
2014-12-10 21:59:00
ubuntucve
ubuntucve
CVE-2014-4465
2014-12-10 00:00:00
nessus
nessus
Safari < 6.2.1 / 7.1.1 / 8.0.1 Multiple Vulnerabilities
2015-03-04 00:00:00
Safari < 6.2.2 / 7.1.2 / 8.0.2 Multiple Vulnerabilities
2015-01-27 00:00:00
Mac OS X : Apple Safari < 6.2.2 / 7.1.2 / 8.0.2 Multiple Vulnerabilities
2014-12-16 00:00:00
openvas
openvas
Apple Safari 'Webkit' Multiple Vulnerabilities-01 (Dec 2014) - Mac OS X
2014-12-16 00:00:00
securityvulns
securityvulns
APPLE-SA-2014-12-2-1 Safari 8.0.1, Safari 7.1.1, and Safari 6.2.1
2014-12-11 00:00:00
Apple Safari / Webkit multiple security vulnerabilities
2014-12-21 00:00:00
APPLE-SA-2015-01-27-1 Apple TV 7.0.3
2015-02-02 00:00:00
6.1 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
73.4%
Related for CVE-2014-4465