First published: Fri Mar 14 2014(Updated: )
WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1292, CVE-2014-1293, and CVE-2014-1294.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
tvOS | <=6.0.2 | |
tvOS | =6.0 | |
tvOS | =6.0.1 | |
Apple iPhone OS | <=7.0.6 | |
Apple iPhone OS | =7.0 | |
Apple iPhone OS | =7.0.1 | |
Apple iPhone OS | =7.0.2 | |
Apple iPhone OS | =7.0.3 | |
Apple iPhone OS | =7.0.4 | |
Apple iPhone OS | =7.0.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-1291 has a critical severity level due to its potential to allow remote code execution.
To fix CVE-2014-1291, update your affected iOS device to the latest version provided by Apple.
CVE-2014-1291 affects Apple iOS devices prior to version 7.1 and Apple TV devices prior to version 6.1.
Yes, CVE-2014-1291 can lead to memory corruption and application crashes, potentially resulting in data loss.
Check your device's operating system version against the versions affected by CVE-2014-1291 to determine if it's at risk.