SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2014-4459

Use-after-free vulnerability in WebKit, as used in Apple OS X before 10.10.1, allows remote attackers to execute arbitrary code via crafted page objects in an HTML document.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.8
Exploit Score: 8.6
Impact Score: 6.4

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Reference:

SECTRACK-1031230

SECUNIA-62503

BID-71144

APPLE-SA-2014-11-17-2

APPLE-SA-2014-12-2-1

APPLE-SA-2015-01-27-1

APPLE-SA-2015-01-27-2

APPLE-SA-2015-06-30-6

http://support.apple.com/HT204245

http://support.apple.com/HT204246

http://support.apple.com/kb/HT6596

https://support.apple.com/en-us/HT204419

https://support.apple.com/en-us/HT6591

https://support.apple.com/kb/HT204949

macosx-cve20144459-code-exec(98784)


30479



423868



248392



909



195452



282