CVE-2014-1390: Buffer Overflow
WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1390?
CVE-2014-1390 has a critical severity rating as it allows remote attackers to execute arbitrary code.
How do I fix CVE-2014-1390?
To fix CVE-2014-1390, update Apple Safari to version 7.0.6 or later for affected versions.
Which versions of Safari are affected by CVE-2014-1390?
CVE-2014-1390 affects Apple Safari versions prior to 6.1.6 and between 7.0 and 7.0.5.
Can CVE-2014-1390 cause data loss?
CVE-2014-1390 can lead to a denial of service which may result in application crashes but is not typically associated with data loss.
What kind of attacks can exploit CVE-2014-1390?
CVE-2014-1390 can be exploited through crafted web pages that trigger memory corruption vulnerabilities.