First published: Fri Mar 14 2014(Updated: )
WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292, and CVE-2014-1294.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
tvOS | <=6.0.2 | |
tvOS | =6.0 | |
tvOS | =6.0.1 | |
Apple iPhone OS | <=7.0.6 | |
Apple iPhone OS | =7.0 | |
Apple iPhone OS | =7.0.1 | |
Apple iPhone OS | =7.0.2 | |
Apple iPhone OS | =7.0.3 | |
Apple iPhone OS | =7.0.4 | |
Apple iPhone OS | =7.0.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-1293 has a high severity rating due to its potential to allow remote code execution and denial of service.
To fix CVE-2014-1293, users should update their iOS devices to version 7.1 or later and Apple TV to version 6.1 or later.
CVE-2014-1293 is present in Apple iOS versions prior to 7.1 and Apple TV versions before 6.1.
CVE-2014-1293 can facilitate remote code execution attacks or cause application crashes through memory corruption.
Yes, CVE-2014-1293 is a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, and CVE-2014-1292.