CVE-2014-1366: Buffer Overflow
WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, and APPLE-SA-2014-06-30-4.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1366?
CVE-2014-1366 has a high severity rating due to its ability to allow remote attackers to execute arbitrary code.
How do I fix CVE-2014-1366?
To fix CVE-2014-1366, update affected devices to the latest version of iOS, Safari, or tvOS that addresses this vulnerability.
What products are affected by CVE-2014-1366?
CVE-2014-1366 affects Apple iOS versions earlier than 7.1.2, Safari versions before 7.0.5, and tvOS versions before 6.1.2.
Can CVE-2014-1366 cause a denial of service?
Yes, CVE-2014-1366 can cause a denial of service condition due to memory corruption that leads to application crashes.
Are there specific versions of Safari impacted by CVE-2014-1366?
Yes, Safari versions from 6.0 to 6.1.4 and 7.0 up to 7.0.4 are impacted by CVE-2014-1366.