CVE-2014-1367: Buffer Overflow
WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, and APPLE-SA-2014-06-30-4.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1367?
CVE-2014-1367 is considered a high severity vulnerability due to its potential for remote code execution and denial of service.
How do I fix CVE-2014-1367?
To fix CVE-2014-1367, you should update to the latest version of Apple iOS, Safari, or tvOS according to the respective patches available.
What versions are affected by CVE-2014-1367?
CVE-2014-1367 affects Apple iOS versions before 7.1.2, Safari versions before 6.1.5 and 7.x before 7.0.5, and tvOS versions before 6.1.2.
Can CVE-2014-1367 lead to data compromise?
Yes, CVE-2014-1367 can lead to data compromise as it allows attackers to execute arbitrary code remotely on vulnerable devices.
Is there a workaround for CVE-2014-1367?
There is no official workaround for CVE-2014-1367, and the best action is to apply the available updates promptly.