CVE-2014-1308: Buffer Overflow
WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1308?
CVE-2014-1308 is considered a critical vulnerability because it allows remote attackers to execute arbitrary code and potentially cause a denial of service.
How do I fix CVE-2014-1308?
To fix CVE-2014-1308, upgrade to Apple Safari version 6.1.3 or higher, or 7.0.3 or higher.
Which versions of Safari are affected by CVE-2014-1308?
CVE-2014-1308 affects Apple Safari versions prior to 6.1.3 and 7.x versions prior to 7.0.3.
What types of attacks are possible with CVE-2014-1308?
Exploitation of CVE-2014-1308 can lead to remote code execution, application crashes, and denial of service attacks.
Is there a workaround for CVE-2014-1308?
There are no specific workarounds for CVE-2014-1308, and the only recommended solution is to update Safari to a patched version.