CVE-2014-4475: Medium severity safari vulnerability

Q: What is the severity of CVE-2014-4475?

CVE-2014-4475 is considered a high severity vulnerability due to its capability to allow remote code execution and denial of service.

Q: How do I fix CVE-2014-4475?

To fix CVE-2014-4475, upgrade Apple Safari to version 6.2.1 or later, and ensure your system is fully patched.

Q: Which versions of Safari are affected by CVE-2014-4475?

CVE-2014-4475 affects Apple Safari versions before 6.2.1, all versions 7.x before 7.1.1, and all versions 8.x before 8.0.1.

Q: Can CVE-2014-4475 cause data loss?

Yes, CVE-2014-4475 can potentially lead to data loss by causing application crashes and memory corruption.

Q: Is CVE-2014-4475 specific to certain Apple devices?

CVE-2014-4475 affects multiple Apple devices, including iPhones and iPads running outdated versions of Safari.

Published Dec 10, 2014

Updated

WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-12-2-1.

Affected Software

13 affected components

Apple Safari<=6.2.0

Apple Safari=7.0

Apple Safari=7.0.1

Apple Safari=7.0.2

Apple Safari=7.0.3

Apple Safari=7.0.4

Apple Safari=7.0.5

Apple Safari=7.0.6

Apple Safari=7.1.0

Apple Safari=8.0.0

Apple iPhone OS<=8.1.2

Apple iTunes<=12.1

Apple tvOS<=7.0.1

Remediation

Patch Available

http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html

Event History

Dec 10, 2014

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4475?

CVE-2014-4475 is considered a high severity vulnerability due to its capability to allow remote code execution and denial of service.

How do I fix CVE-2014-4475?