CVE-2014-1389: Buffer Overflow
WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1389?
CVE-2014-1389 is considered a high severity vulnerability due to the potential for remote code execution and denial of service.
How do I fix CVE-2014-1389?
To fix CVE-2014-1389, you should update to Apple Safari version 7.0.6 or later.
Which versions of Safari are affected by CVE-2014-1389?
CVE-2014-1389 affects Apple Safari versions prior to 6.1.6 and 7.x before 7.0.6.
What impact does CVE-2014-1389 have on users?
The impact of CVE-2014-1389 can include arbitrary code execution or application crashes, leading to potential data loss.
Is there a workaround for CVE-2014-1389?
Currently, the best workaround for CVE-2014-1389 is to avoid using affected versions of Safari until an update is applied.