Lucene search

K
nvd[email protected]NVD:CVE-2014-4452
HistoryNov 18, 2014 - 11:59 a.m.

CVE-2014-4452

2014-11-1811:59:01
CWE-399
web.nvd.nist.gov
6

CVSS2

5.4

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.022

Percentile

89.8%

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-4462.

Affected configurations

Nvd
Node
appletvosRange6.07.0.2
Node
appleiphone_osRange8.08.1.1
Node
applesafariRange6.06.2.1
OR
applesafariRange7.07.1.1
OR
applesafariRange8.08.0.1
Node
appleitunesRange<12.2

CVSS2

5.4

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.022

Percentile

89.8%