Lucene search
HistoryApr 02, 2014 - 4:17 p.m.
CVE-2014-1297
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
8.8
Confidence
High
EPSS
0.004
Percentile
73.5%
WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.
Affected configurations
Node
applesafariRange≤6.1.2
ORapplesafariMatch6.0
ORapplesafariMatch6.0.1
ORapplesafariMatch6.0.2
ORapplesafariMatch6.0.3
ORapplesafariMatch6.0.4
ORapplesafariMatch6.0.5
ORapplesafariMatch6.1
ORapplesafariMatch6.1.1
ORapplesafariMatch7.0
ORapplesafariMatch7.0.1
ORapplesafariMatch7.0.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | safari | * | cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* |
| apple | safari | 6.0 | cpe:2.3:a:apple:safari:6.0:*:*:*:*:*:*:* |
| apple | safari | 6.0.1 | cpe:2.3:a:apple:safari:6.0.1:*:*:*:*:*:*:* |
| apple | safari | 6.0.2 | cpe:2.3:a:apple:safari:6.0.2:*:*:*:*:*:*:* |
| apple | safari | 6.0.3 | cpe:2.3:a:apple:safari:6.0.3:*:*:*:*:*:*:* |
| apple | safari | 6.0.4 | cpe:2.3:a:apple:safari:6.0.4:*:*:*:*:*:*:* |
| apple | safari | 6.0.5 | cpe:2.3:a:apple:safari:6.0.5:*:*:*:*:*:*:* |
| apple | safari | 6.1 | cpe:2.3:a:apple:safari:6.1:*:*:*:*:*:*:* |
| apple | safari | 6.1.1 | cpe:2.3:a:apple:safari:6.1.1:*:*:*:*:*:*:* |
| apple | safari | 7.0 | cpe:2.3:a:apple:safari:7.0:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2014-04-02 16:17:00
cve
cve
CVE-2014-1297
2014-04-02 16:17:06
ubuntucve
ubuntucve
CVE-2014-1297
2014-04-02 00:00:00
cvelist
cvelist
CVE-2014-1297
2014-04-02 15:00:00
openvas
openvas
nessus
nessus
Mac OS X : Apple Safari < 6.1.3 / 7.0.3 Multiple Vulnerabilities
2014-04-02 00:00:00
Safari < 6.1.3 / 7.0.3 Multiple Vulnerabilities
2014-04-10 00:00:00
RHEL 6 : webkitgtk (Unpatched Vulnerability)
2024-06-03 00:00:00
securityvulns
securityvulns
APPLE-SA-2014-04-01-1 Safari 6.1.3 and Safari 7.0.3
2014-04-03 00:00:00
Apple Safari multiple security vulnerabilities
2014-04-03 00:00:00
WebKitGTK+ Security Advisory WSA-2015-0001
2015-02-02 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
8.8
Confidence
High
EPSS
0.004
Percentile
73.5%
Related for NVD:CVE-2014-1297