CVE-2014-1303: Buffer Overflow
Published Mar 26, 2014
·Updated
Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Liang Chen during a Pwn2Own competition at CanSecWest 2014.
Affected Software
1 affected component
Safari=7.0.2
Event History
Mar 26, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-1303?
CVE-2014-1303 is considered critical due to its potential for remote code execution and sandbox bypass.
2
How do I fix CVE-2014-1303?
To fix CVE-2014-1303, update Apple Safari to the latest version available.
3
What are the consequences of exploiting CVE-2014-1303?
Exploiting CVE-2014-1303 can allow attackers to execute arbitrary code on the affected system.
4
Which versions of Apple Safari are affected by CVE-2014-1303?
CVE-2014-1303 specifically affects Apple Safari version 7.0.2.
5
How can I determine if my system is vulnerable to CVE-2014-1303?
You can determine vulnerability to CVE-2014-1303 by checking if you are running Apple Safari version 7.0.2.