CVE-2014-1326: Buffer Overflow
WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1326?
CVE-2014-1326 is considered a critical vulnerability as it allows remote attackers to execute arbitrary code or cause denial of service.
How do I fix CVE-2014-1326?
To fix CVE-2014-1326, you should update Apple Safari to version 6.1.4 or later if you're using Safari 6.x, or to version 7.0.4 or later if you're using Safari 7.x.
Which versions of Safari are affected by CVE-2014-1326?
CVE-2014-1326 affects Apple Safari versions 6.0 through 6.1.3 and 7.0 through 7.0.3.
What types of attacks can be executed using CVE-2014-1326?
Vulnerabilities like CVE-2014-1326 can allow attackers to execute arbitrary code or induce memory corruption, leading to application crashes.
Is there a workaround for CVE-2014-1326 if I can't update Safari?
There is no known reliable workaround for CVE-2014-1326; the best course of action is to update to a secure version of Safari.