CVE-2014-4412: Buffer Overflow
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4412?
CVE-2014-4412 is considered a high-severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2014-4412?
To fix CVE-2014-4412, update affected devices to a version of iOS or tvOS that is 8.0 or higher.
What versions are affected by CVE-2014-4412?
CVE-2014-4412 affects Apple iOS versions 7.x and tvOS versions up to 6.2.
What types of attacks are possible with CVE-2014-4412?
CVE-2014-4412 can be exploited to execute arbitrary code or cause denial of service through memory corruption.
Is CVE-2014-4412 still exploitable on current devices?
No, CVE-2014-4412 is no longer exploitable on devices that have been updated to patched versions beyond 8.0 for iOS and 7.0 for tvOS.