VulnerabilityModified
CVE-2014-4452
WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than…
MEDIUM 5.4EPSS 1.32%
Does this matter?
Lower severity and a low EPSS score (1.32%). Track it; it rarely justifies an emergency change on its own.
Description
WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-4462.
- CVSS 2.0
- 5.4 MEDIUMAV:A/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.32% probability · 69th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- apple/tvos · apple/iphone os · apple/safari · apple/itunes
- Source
- product-security@apple.com
References
- http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.htmlMailing List, Patch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2014/Nov/msg00000.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2014/Nov/msg00002.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.htmlMailing List, Patch, Vendor Advisory
- http://secunia.com/advisories/62504Third Party Advisory
- http://secunia.com/advisories/62505Third Party Advisory
- http://support.apple.com/kb/HT6596Vendor Advisory
- http://www.securityfocus.com/bid/71137Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1031231Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98771Third Party Advisory, VDB Entry
- https://support.apple.com/en-us/HT204418Vendor Advisory
- https://support.apple.com/en-us/HT204420Vendor Advisory
- https://support.apple.com/en-us/HT6590Vendor Advisory
- https://support.apple.com/en-us/HT6592Vendor Advisory
- https://support.apple.com/kb/HT204949Vendor Advisory
- http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.htmlMailing List, Patch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2014/Nov/msg00000.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2014/Nov/msg00002.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.htmlMailing List, Patch, Vendor Advisory
- http://secunia.com/advisories/62504Third Party Advisory
- http://secunia.com/advisories/62505Third Party Advisory
- http://support.apple.com/kb/HT6596Vendor Advisory
- http://www.securityfocus.com/bid/71137Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1031231Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98771Third Party Advisory, VDB Entry
- https://support.apple.com/en-us/HT204418Vendor Advisory
- https://support.apple.com/en-us/HT204420Vendor Advisory
- https://support.apple.com/en-us/HT6590Vendor Advisory
- https://support.apple.com/en-us/HT6592Vendor Advisory
- https://support.apple.com/kb/HT204949Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.