CVE-2014-4467
published 2015-01-30CVE-2014-4467: WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote…
PriorityP419medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.15%
63.6th percentile
WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote attackers to spoof the UI via a crafted web site.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios | — | — |
| apple | iphone_os | <= 8.1.2 | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2014-4467: iOS 8.1.3
vendor_apple·CVSS 4.3
CVE-2014-4467 [MEDIUM] CVE-2014-4467: iOS 8.1.3
Apple Security Update: About the security content of iOS 8.1.3
Product: iOS
Version: 8.1.3
CVE: CVE-2014-4467
Component: CVE-ID
GHSA
GHSA-cvpw-fqmx-ggx7: WebKit, as used in Apple iOS before 8
ghsa_unreviewed·2022-05-17
CVE-2014-4467 [MEDIUM] GHSA-cvpw-fqmx-ggx7: WebKit, as used in Apple iOS before 8
WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote attackers to spoof the UI via a crafted web site.
OSV
CVE-2014-4467: WebKit, as used in Apple iOS before 8
osv·2015-01-30·CVSS 4.3
CVE-2014-4467 [MEDIUM] CVE-2014-4467: WebKit, as used in Apple iOS before 8
WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote attackers to spoof the UI via a crafted web site.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-01-30
Published