CVE-2014-1345

Published: Jul 1, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

WebKit in Apple iOS before 7.1.2 and Apple Safari before 6.1.5 and 7.x before 7.0.5 does not properly encode domain names in URLs, which allows remote attackers to spoof the address bar via a crafted web site.

Affected (25)

Products: Apple: Safari, Iphone Os

Apple

2 products

Safari

Iphone Os

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Apple Safari	Up to 6.1.4
Apple Safari	Version 6.0.1
Apple Safari	Version 6.0.2
Apple Safari	Version 6.0.3
Apple Safari	Version 6.0.4
Apple Safari	Version 6.0.5
Apple Safari	Version 6.0
Apple Safari	Version 6.1.1
Apple Safari	Version 6.1.2
Apple Safari	Version 6.1.3
Apple Safari	Version 6.1

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Apple Safari	Version 7.0.1
Apple Safari	Version 7.0.2
Apple Safari	Version 7.0.3
Apple Safari	Version 7.0.4
Apple Safari	Version 7.0

Configuration C

9 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Up to 7.1.1
Apple Iphone Os	Version 7.0.1
Apple Iphone Os	Version 7.0.2
Apple Iphone Os	Version 7.0.3
Apple Iphone Os	Version 7.0.4
Apple Iphone Os	Version 7.0.5
Apple Iphone Os	Version 7.0.6
Apple Iphone Os	Version 7.0
Apple Iphone Os	Version 7.1