Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-4467
HistoryJan 30, 2015 - 12:00 a.m.

CVE-2014-4467

2015-01-3000:00:00
ubuntu.com
ubuntu.com
16

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.002

Percentile

53.1%

WebKit, as used in Apple iOS before 8.1.3, does not properly determine
scrollbar boundaries during the rendering of FRAME elements, which allows
remote attackers to spoof the UI via a crafted web site.

Notes

Author Note
jdstrand webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.002

Percentile

53.1%