CVE-2014-1382

Published: Jul 1, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, and APPLE-SA-2014-06-30-4.

Affected (30)

Products: Apple: Safari, Tvos, Iphone Os

3 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Apple Safari	Version 7.0.1
Apple Safari	Version 7.0.2
Apple Safari	Version 7.0.3
Apple Safari	Version 7.0.4
Apple Safari	Version 7.0

Configuration B

11 vulnerable

Vulnerable Software	Affected Versions
Apple Safari	Up to 6.1.4
Apple Safari	Version 6.0.1
Apple Safari	Version 6.0.2
Apple Safari	Version 6.0.3
Apple Safari	Version 6.0.4
Apple Safari	Version 6.0.5
Apple Safari	Version 6.0
Apple Safari	Version 6.1.1
Apple Safari	Version 6.1.2
Apple Safari	Version 6.1.3
Apple Safari	Version 6.1

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Apple Tvos	Up to 6.1.1
Apple Tvos	Version 6.0.1
Apple Tvos	Version 6.0.2
Apple Tvos	Version 6.0
Apple Tvos	Version 6.1

Configuration D

9 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Up to 7.1.1
Apple Iphone Os	Version 7.0.1
Apple Iphone Os	Version 7.0.2
Apple Iphone Os	Version 7.0.3
Apple Iphone Os	Version 7.0.4
Apple Iphone Os	Version 7.0.5
Apple Iphone Os	Version 7.0.6
Apple Iphone Os	Version 7.0
Apple Iphone Os	Version 7.1