CVE-2014-4476: Buffer Overflow
WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-4477 and CVE-2014-4479.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4476?
CVE-2014-4476 is considered a high severity vulnerability due to its potential to allow remote code execution and cause denial of service.
How do I fix CVE-2014-4476?
To fix CVE-2014-4476, users should update their affected Apple software to the latest versions that address this vulnerability.
Which versions are affected by CVE-2014-4476?
CVE-2014-4476 affects multiple versions of Apple Safari, iTunes, iOS, and tvOS prior to their respective updates that mitigated the vulnerability.
What types of attacks are possible with CVE-2014-4476?
CVE-2014-4476 can potentially be exploited by remote attackers to execute arbitrary code or crash the application through crafted web content.
Is there a workaround for CVE-2014-4476 if I cannot update?
Currently, there are no recommended workarounds for CVE-2014-4476, so updating to a secure version is the best option.