CVE-2014-1345 — Apple Iphone OS vulnerability

3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.6%
top 30.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Iphone OSApple Safari
Timeline
PublishedJul 1
Latest updateMay 17

Description

WebKit in Apple iOS before 7.1.2 and Apple Safari before 6.1.5 and 7.x before 7.0.5 does not properly encode domain names in URLs, which allows remote attackers to spoof the address bar via a crafted web site.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDapple/safari6.1.4+15
▶NVDapple/iphone_os7.1.1+8

🔴Vulnerability Details

2
GHSA
GHSA-2pxc-92c8-j37f: WebKit in Apple iOS before 7↗2022-05-17
▶
OSV
CVE-2014-1345: WebKit in Apple iOS before 7↗2014-07-01
▶
CVE-2014-1345 — Apple Iphone OS vulnerability | cvebase