Lucene search
HistoryMar 14, 2014 - 10:55 a.m.
CVE-2014-1290
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
9.5
Confidence
High
EPSS
0.088
Percentile
94.6%
WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1291, CVE-2014-1292, CVE-2014-1293, and CVE-2014-1294.
Affected configurations
Node
appleiphone_osRange≤7.0.6
ORappleiphone_osMatch7.0
ORappleiphone_osMatch7.0.1
ORappleiphone_osMatch7.0.2
ORappleiphone_osMatch7.0.3
ORappleiphone_osMatch7.0.4
ORappleiphone_osMatch7.0.5
Node
appletvosRange≤6.0.2
ORappletvosMatch6.0
ORappletvosMatch6.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | iphone_os | * | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | iphone_os | 7.0 | cpe:2.3:o:apple:iphone_os:7.0:*:*:*:*:*:*:* |
| apple | iphone_os | 7.0.1 | cpe:2.3:o:apple:iphone_os:7.0.1:*:*:*:*:*:*:* |
| apple | iphone_os | 7.0.2 | cpe:2.3:o:apple:iphone_os:7.0.2:*:*:*:*:*:*:* |
| apple | iphone_os | 7.0.3 | cpe:2.3:o:apple:iphone_os:7.0.3:*:*:*:*:*:*:* |
| apple | iphone_os | 7.0.4 | cpe:2.3:o:apple:iphone_os:7.0.4:*:*:*:*:*:*:* |
| apple | iphone_os | 7.0.5 | cpe:2.3:o:apple:iphone_os:7.0.5:*:*:*:*:*:*:* |
| apple | tvos | * | cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
| apple | tvos | 6.0 | cpe:2.3:o:apple:tvos:6.0:*:*:*:*:*:*:* |
| apple | tvos | 6.0.1 | cpe:2.3:o:apple:tvos:6.0.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
cve
cve
prion
prion
Memory corruption
2014-03-14 10:55:00
Memory corruption
2014-03-14 10:55:00
Memory corruption
2014-03-14 10:55:00
nvd
nvd
zdi
zdi
threatpost
threatpost
Apple Fixes More Than 25 Flaws in Safari
2014-04-02 07:20:27
nessus
nessus
Mac OS X : Apple Safari < 6.1.3 / 7.0.3 Multiple Vulnerabilities
2014-04-02 00:00:00
Safari < 6.1.3 / 7.0.3 Multiple Vulnerabilities
2014-04-10 00:00:00
Apple TV < 6.1 Multiple Vulnerabilities
2014-03-12 00:00:00
securityvulns
securityvulns
APPLE-SA-2014-04-01-1 Safari 6.1.3 and Safari 7.0.3
2014-04-03 00:00:00
Apple Safari multiple security vulnerabilities
2014-04-03 00:00:00
APPLE-SA-2014-03-10-2 Apple TV 6.1
2014-03-13 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
9.5
Confidence
High
EPSS
0.088
Percentile
94.6%
Related for NVD:CVE-2014-1290