CVE-2014-1382: Buffer Overflow
WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, and APPLE-SA-2014-06-30-4.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1382?
CVE-2014-1382 is classified as a critical vulnerability that can allow remote code execution or cause denial of service.
How do I fix CVE-2014-1382?
To mitigate CVE-2014-1382, update your affected Apple software to versions 6.1.5 or 7.0.5 and later.
Which versions of Safari are affected by CVE-2014-1382?
CVE-2014-1382 affects Safari versions before 6.1.5 and 7.x before 7.0.5.
How can CVE-2014-1382 be exploited?
CVE-2014-1382 can be exploited by attackers through a crafted website that may lead to memory corruption.
What devices are impacted by CVE-2014-1382?
CVE-2014-1382 impacts iOS devices before version 7.1.2, Apple TV before version 6.1.2, and certain Safari versions.