Lucene search
AppleCVE-2014-1369HistoryJul 01, 2014 - 10:17 a.m.
CVE-2014-1369
2014-07-0110:17:27
CWE-20
apple
web.nvd.nist.gov
28
cve-2014-1369
webkit
apple safari
remote code execution
vulnerability
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.2
Confidence
Low
EPSS
0.003
Percentile
68.2%
WebKit in Apple Safari before 6.1.5 and 7.x before 7.0.5 allows user-assisted remote attackers to access file: URLs by leveraging a URL drag operation that originates at a crafted web site.
Affected configurations
Node
applesafariRange≤6.1.4
ORapplesafariMatch6.0
ORapplesafariMatch6.0.1
ORapplesafariMatch6.0.2
ORapplesafariMatch6.0.3
ORapplesafariMatch6.0.4
ORapplesafariMatch6.0.5
ORapplesafariMatch6.1
ORapplesafariMatch6.1.1
ORapplesafariMatch6.1.2
ORapplesafariMatch6.1.3
Node
applesafariMatch7.0
ORapplesafariMatch7.0.1
ORapplesafariMatch7.0.2
ORapplesafariMatch7.0.3
ORapplesafariMatch7.0.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | safari | * | cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* |
| apple | safari | 6.0 | cpe:2.3:a:apple:safari:6.0:*:*:*:*:*:*:* |
| apple | safari | 6.0.1 | cpe:2.3:a:apple:safari:6.0.1:*:*:*:*:*:*:* |
| apple | safari | 6.0.2 | cpe:2.3:a:apple:safari:6.0.2:*:*:*:*:*:*:* |
| apple | safari | 6.0.3 | cpe:2.3:a:apple:safari:6.0.3:*:*:*:*:*:*:* |
| apple | safari | 6.0.4 | cpe:2.3:a:apple:safari:6.0.4:*:*:*:*:*:*:* |
| apple | safari | 6.0.5 | cpe:2.3:a:apple:safari:6.0.5:*:*:*:*:*:*:* |
| apple | safari | 6.1 | cpe:2.3:a:apple:safari:6.1:*:*:*:*:*:*:* |
| apple | safari | 6.1.1 | cpe:2.3:a:apple:safari:6.1.1:*:*:*:*:*:*:* |
| apple | safari | 6.1.2 | cpe:2.3:a:apple:safari:6.1.2:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2014-1369
2014-07-01 10:00:00
nvd
nvd
CVE-2014-1369
2014-07-01 10:17:27
prion
prion
Code injection
2014-07-01 10:17:00
nessus
nessus
Safari < 6.1.5 / 7.0.5 Multiple Vulnerabilities
2014-06-08 00:00:00
Mac OS X : Apple Safari < 6.1.5 / 7.0.5 Multiple Vulnerabilities
2014-06-30 00:00:00
securityvulns
securityvulns
APPLE-SA-2014-06-30-1 Safari 6.1.5 and Safari 7.0.5
2014-08-04 00:00:00
Apple Safari / Webkit multiple security vulnerabilities
2015-02-02 00:00:00
openvas
openvas
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.2
Confidence
Low
EPSS
0.003
Percentile
68.2%
Related for CVE-2014-1369