[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248038

 
 

909

 
 

194772

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Use-after-free vulnerability in WebKit in Apple Mac OS X or Apple Safari via crafted page objects in an HTML document

ID: oval:org.secpod.oval:def:21725Date: (C)2014-11-25   (M)2023-11-18
Class: VULNERABILITYFamily: macos




The host is installed with Apple Mac OS X or Server before 10.10.1 or Apple Safari before 6.2.1, 7.x before 7.1.1 or 8.x before 8.0.1 and is prone to use-after-free vulnerability. A flaw is present in the WebKit, which fails to properly handle a crafted page objects in an HTML document. Successful exploitation allows attackers to execute arbitrary code.

Platform:
Apple Mac OS X 10.8
Apple Mac OS X 10.9
Apple Mac OS X 10.10
Apple Mac OS X Server 10.8
Apple Mac OS X Server 10.9
Apple Mac OS X Server 10.10
Product:
Apple Safari
Reference:
CVE-2014-4459
CVE    1
CVE-2014-4459
CPE    88
cpe:/o:apple:mac_os_x:10.4.9
cpe:/o:apple:mac_os_x:10.6.7
cpe:/o:apple:mac_os_x:10.8.5
cpe:/o:apple:mac_os_x:10.4.8
...

© SecPod Technologies