Lucene search
AppleCVE-2014-1338HistoryMay 22, 2014 - 7:55 p.m.
CVE-2014-1338
2014-05-2219:55:07
CWE-119
apple
web.nvd.nist.gov
42
cve-2014-1338
webkit
apple
safari
remote code execution
denial of service
memory corruption
application crash
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.9
Confidence
High
EPSS
0.008
Percentile
81.6%
WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1.
Affected configurations
Node
applesafariRange≤6.1.3
ORapplesafariMatch6.0
ORapplesafariMatch6.0.1
ORapplesafariMatch6.0.2
ORapplesafariMatch6.0.3
ORapplesafariMatch6.0.4
ORapplesafariMatch6.0.5
ORapplesafariMatch6.1
ORapplesafariMatch6.1.1
ORapplesafariMatch6.1.2
ORapplesafariMatch7.0
ORapplesafariMatch7.0.1
ORapplesafariMatch7.0.2
ORapplesafariMatch7.0.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | safari | 7.0.1 | cpe:/a:apple:safari:7.0.1::: |
| apple | safari | 7.0 | cpe:/a:apple:safari:7.0::: |
| apple | safari | 6.1 | cpe:/a:apple:safari:6.1::: |
| apple | safari | 7.0.3 | cpe:/a:apple:safari:7.0.3::: |
| apple | safari | 6.0.4 | cpe:/a:apple:safari:6.0.4::: |
| apple | safari | 6.1.2 | cpe:/a:apple:safari:6.1.2::: |
| apple | safari | 6.1.1 | cpe:/a:apple:safari:6.1.1::: |
| apple | safari | 6.0.2 | cpe:/a:apple:safari:6.0.2::: |
| apple | safari | 6.0.1 | cpe:/a:apple:safari:6.0.1::: |
| apple | safari | 6.0.5 | cpe:/a:apple:safari:6.0.5::: |
Related
nvd
nvd
CVE-2014-1338
2014-05-22 19:55:07
prion
prion
Memory corruption
2014-05-22 19:55:00
cvelist
cvelist
CVE-2014-1338
2014-05-22 19:00:00
ubuntucve
ubuntucve
CVE-2014-1338
2014-05-22 00:00:00
openvas
openvas
thn
thn
Apple Patches 22 Safari WebKit Vulnerabilities
2014-05-23 20:33:00
securityvulns
securityvulns
Apple Safari multiple security vulnerabilities
2014-05-29 00:00:00
APPLE-SA-2014-05-21-1 Safari 6.1.4 and Safari 7.0.4
2014-05-29 00:00:00
Apple TV multiple security vulnerabilities
2014-08-04 00:00:00
nessus
nessus
Mac OS X : Apple Safari < 6.1.4 / 7.0.4 Multiple Vulnerabilities
2014-05-22 00:00:00
Safari < 6.1.4 / 7.0.4 Multiple Vulnerabilities
2014-05-23 00:00:00
Apple TV < 6.1.2 Multiple Vulnerabilities
2014-07-06 00:00:00
threatpost
threatpost
May 2014 Apple Safari Browser Security Patches
2014-05-23 09:03:49
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.9
Confidence
High
EPSS
0.008
Percentile
81.6%
Related for CVE-2014-1338