CVE-2014-1340: Buffer Overflow
WebKit, as used in Apple Safari before 6.1.5 and 7.x before 7.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1340?
CVE-2014-1340 has been classified as a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2014-1340?
To fix CVE-2014-1340, update Safari to versions 6.1.5 or 7.0.5 or later.
What versions of Safari are affected by CVE-2014-1340?
CVE-2014-1340 affects Safari versions 6.1.4 and earlier and all versions of Safari 7.x prior to 7.0.5.
What type of attack does CVE-2014-1340 enable?
CVE-2014-1340 enables attackers to execute arbitrary code or cause a denial of service through maliciously crafted web pages.
Who is impacted by CVE-2014-1340?
Users of Safari versions prior to 6.1.5 and 7.0.5 are susceptible to the vulnerabilities exploited by CVE-2014-1340.