CVE-2014-1366

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, and APPLE-SA-2014-06-30-4.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html
http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html
http://archives.neohapsis.com/archives/bugtraq/2014-06/0175.html
http://secunia.com/advisories/59481
http://www.securitytracker.com/id/1030495
https://support.apple.com/kb/HT6537

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:tvos::::::::
	cpe:2.3:o:apple:tvos:6.0:::::::*
	cpe:2.3:o:apple:tvos:6.0.1:::::::*
	cpe:2.3:o:apple:tvos:6.0.2:::::::*
	cpe:2.3:o:apple:tvos:6.1:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:apple:safari:7.0:::::::*
	cpe:2.3:a:apple:safari:7.0.1:::::::*
	cpe:2.3:a:apple:safari:7.0.2:::::::*
	cpe:2.3:a:apple:safari:7.0.3:::::::*
	cpe:2.3:a:apple:safari:7.0.4:::::::*

Configuration 3 (hide)

OR	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:iphone_os:7.0:::::::*
	cpe:2.3:o:apple:iphone_os:7.0.1:::::::*
	cpe:2.3:o:apple:iphone_os:7.0.2:::::::*
	cpe:2.3:o:apple:iphone_os:7.0.3:::::::*
	cpe:2.3:o:apple:iphone_os:7.0.4:::::::*
	cpe:2.3:o:apple:iphone_os:7.0.5:::::::*
	cpe:2.3:o:apple:iphone_os:7.0.6:::::::*
	cpe:2.3:o:apple:iphone_os:7.1:::::::*

Configuration 4 (hide)

OR	cpe:2.3:a:apple:safari::::::::
	cpe:2.3:a:apple:safari:6.0:::::::*
	cpe:2.3:a:apple:safari:6.0.1:::::::*
	cpe:2.3:a:apple:safari:6.0.2:::::::*
	cpe:2.3:a:apple:safari:6.0.3:::::::*
	cpe:2.3:a:apple:safari:6.0.4:::::::*
	cpe:2.3:a:apple:safari:6.0.5:::::::*
	cpe:2.3:a:apple:safari:6.1:::::::*
	cpe:2.3:a:apple:safari:6.1.1:::::::*
	cpe:2.3:a:apple:safari:6.1.2:::::::*
	cpe:2.3:a:apple:safari:6.1.3:::::::*

History

No history.

Information

Published : 2014-07-01 10:17

Updated : 2019-03-08 16:06

NVD link : CVE-2014-1366

Mitre link : CVE-2014-1366

CVE.ORG link : CVE-2014-1366

JSON object : View

Products Affected

apple

safari
iphone_os
tvos

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2014-1366", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2014-07-01T10:17:26.970", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html", "source": "product-security@apple.com"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html", "source": "product-security@apple.com"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2014-06/0175.html", "source": "product-security@apple.com"}, {"url": "http://secunia.com/advisories/59481", "source": "product-security@apple.com"}, {"url": "http://www.securitytracker.com/id/1030495", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/kb/HT6537", "source": "product-security@apple.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, and APPLE-SA-2014-06-30-4."}, {"lang": "es", "value": "WebKit, utilizado en Apple iOS anterior a 7.1.2, Apple Safari anterior a 6.1.5 y 7.x anterior a 7.0.5, y Apple TV anterior a 6.1.2, permite a atacantes remotos ejecutar c\u00f3digo arbitrario o causar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria y ca\u00edda de aplicaci\u00f3n) a trav\u00e9s de un sitio web manipulados, una vulnerabilidad diferente a otros CVEs de WebKit listados en APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, y APPLE-SA-2014-06-30-4."}], "lastModified": "2019-03-08T16:06:30.590", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1AE5BFA0-A785-47FB-AE9E-4F6297DD1FBF", "versionEndIncluding": "6.1.1"}, {"criteria": "cpe:2.3:o:apple:tvos:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5365205F-B91D-4123-8CFD-EA42E0DEA944"}, {"criteria": "cpe:2.3:o:apple:tvos:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8C7F676-5ACC-4330-9591-465CA8AF77AA"}, {"criteria": "cpe:2.3:o:apple:tvos:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5314D7F-8352-41F5-A155-5E5392C58ABF"}, {"criteria": "cpe:2.3:o:apple:tvos:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36567F18-DE70-4189-A52E-A0376C779B7C"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88D46FE5-10D2-44A0-ACAE-CEED8BD0C30C"}, {"criteria": "cpe:2.3:a:apple:safari:7.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "391B4255-4434-4EB3-929B-3E593D9CD249"}, {"criteria": "cpe:2.3:a:apple:safari:7.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40B87D10-55B3-42E7-8FF6-93EDF003337D"}, {"criteria": "cpe:2.3:a:apple:safari:7.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D4EBCD8-9DD5-468E-8B5B-49E38FEBCEC2"}, {"criteria": "cpe:2.3:a:apple:safari:7.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B8C7AEC-F54A-4843-A0EA-C7DD847BEF5B"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8E92C81-A564-4B9A-A263-8C0CF7844D32", "versionEndIncluding": "7.1.1"}, {"criteria": "cpe:2.3:o:apple:iphone_os:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07A11433-B725-4BD6-B998-4B3637F061EC"}, {"criteria": "cpe:2.3:o:apple:iphone_os:7.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4FD62141-07B1-4E3D-80BC-25D519F90DBD"}, {"criteria": "cpe:2.3:o:apple:iphone_os:7.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9737BD4-B4F4-4291-A1E9-B692ECBC657E"}, {"criteria": "cpe:2.3:o:apple:iphone_os:7.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6160869-944D-4E34-BB81-6A1259D692B1"}, {"criteria": "cpe:2.3:o:apple:iphone_os:7.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "090CAC3C-4B20-46E5-A8C7-950B7E1DB5E9"}, {"criteria": "cpe:2.3:o:apple:iphone_os:7.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E96F77DD-0962-4E55-97A2-9BC2FE01D8A8"}, {"criteria": "cpe:2.3:o:apple:iphone_os:7.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8BD9ACBF-34A4-4181-A6E0-78ABD4FC9ACB"}, {"criteria": "cpe:2.3:o:apple:iphone_os:7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDF40E86-E5D2-4D66-B296-ADFA78B42113"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36947A2E-93EB-4A44-BFF6-9D9F414D9BB3", "versionEndIncluding": "6.1.4"}, {"criteria": "cpe:2.3:a:apple:safari:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9BA4B009-6BF2-4174-A05C-77B75C45377C"}, {"criteria": "cpe:2.3:a:apple:safari:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "136A760D-2873-4216-AB60-E3D93DE82BCF"}, {"criteria": "cpe:2.3:a:apple:safari:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFF3DFE0-2587-4E91-ACC2-45E9B51EF4C4"}, {"criteria": "cpe:2.3:a:apple:safari:6.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "076B9C00-EFB0-4284-A617-FAEE341F80FB"}, {"criteria": "cpe:2.3:a:apple:safari:6.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8851ED07-715F-4F6A-AE29-FA95D069F972"}, {"criteria": "cpe:2.3:a:apple:safari:6.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65EBA204-5E12-429A-9414-400CBAA0BA89"}, {"criteria": "cpe:2.3:a:apple:safari:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A600193-92E3-4A31-824D-94BC87E513B2"}, {"criteria": "cpe:2.3:a:apple:safari:6.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74543772-8C0C-4055-BC1E-D7EAA8A55B51"}, {"criteria": "cpe:2.3:a:apple:safari:6.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77462FFC-4F46-4DE4-BE90-78457B7B4FD7"}, {"criteria": "cpe:2.3:a:apple:safari:6.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F51B6FF0-D566-4348-8A6D-4F13615D5C49"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}

6.8 /10