CVE-2014-1368 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Iphone OS

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
6.8MEDIUMNVD
EPSS
1.6%
top 18.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple Iphone OSApple SafariApple Tvos
Timeline
PublishedJul 1
Latest updateMay 14

Description

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, and APPLE-SA-2014-06-30-4.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages3 packages

▶NVDapple/safari6.1.4+15
▶NVDapple/tvos6.1.1+4
▶NVDapple/iphone_os7.1.1+8

🔴Vulnerability Details

2
GHSA
GHSA-g8rr-3359-9wf2: WebKit, as used in Apple iOS before 7↗2022-05-14
▶
OSV
CVE-2014-1368: WebKit, as used in Apple iOS before 7↗2014-07-01
▶
CVE-2014-1368 — Apple Iphone OS vulnerability | cvebase