Lucene search

K
nvd[email protected]NVD:CVE-2014-4462
HistoryNov 18, 2014 - 11:59 a.m.

CVE-2014-4462

2014-11-1811:59:09
CWE-399
web.nvd.nist.gov
7

CVSS2

5.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.022

Percentile

89.8%

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-4452.

Affected configurations

Nvd
Node
appleiphone_osRange8.1
OR
appleiphone_osMatch8.0
OR
appleiphone_osMatch8.0.1
OR
appleiphone_osMatch8.0.2
Node
appletvosRange7.0.1
OR
appletvosMatch6.0
OR
appletvosMatch6.0.1
OR
appletvosMatch6.0.2
OR
appletvosMatch6.1
OR
appletvosMatch6.1.1
OR
appletvosMatch6.1.2
OR
appletvosMatch6.2
OR
appletvosMatch6.2.1
OR
appletvosMatch7.0

CVSS2

5.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.022

Percentile

89.8%