Lucene search

K
cve[email protected]CVE-2014-4479
HistoryJan 30, 2015 - 11:59 a.m.

CVE-2014-4479

2015-01-3011:59:12
CWE-119
web.nvd.nist.gov
33
cve-2014-4479
webkit
apple ios
apple safari
apple tv
remote code execution
memory corruption
application crash

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.3 Medium

AI Score

Confidence

High

0.027 Low

EPSS

Percentile

90.5%

WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-4476 and CVE-2014-4477.

Affected configurations

NVD
Node
applesafariRange6.2.2
OR
applesafariMatch7.0
OR
applesafariMatch7.0.1
OR
applesafariMatch7.0.2
OR
applesafariMatch7.0.3
OR
applesafariMatch7.0.4
OR
applesafariMatch7.0.5
OR
applesafariMatch7.0.6
OR
applesafariMatch7.1.0
OR
applesafariMatch7.1.1
OR
applesafariMatch7.1.2
OR
applesafariMatch8.0.0
OR
applesafariMatch8.0.1
OR
applesafariMatch8.0.2
Node
appleiphone_osRange8.1.2
OR
appletvosRange7.0.1
Node
appleitunesRange12.1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.3 Medium

AI Score

Confidence

High

0.027 Low

EPSS

Percentile

90.5%