CVE-2014-4459
Medium
Description
Use-after-free vulnerability in WebKit, as used in Apple OS X before 10.10.1, allows remote attackers to execute arbitrary code via crafted page objects in an HTML document.
SeverityMedium
CVSS6.8
Exploit probability—
Product
Apple Safari
PublishedNov 18, 2014
First seenNov 18, 2014
How to fix
Update
- apple safari6.2.1, 7.1.1, 8.0.1 or later
- apple mac_os_x10.10.1 or later
- apple iphone_os8.1.3 or later
- apple itunes12.2 or later
- apple tvos7.0.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple safari | 6.0 ≤ v < 6.2.1, 7.0 ≤ v < 7.1.1, 8.0 ≤ v < 8.0.1 | 6.2.1, 7.1.1, 8.0.1 |
| apple mac_os_x | v < 10.10.1 | 10.10.1 |
| apple iphone_os | v < 8.1.3 | 8.1.3 |
| apple itunes | v < 12.2 | 12.2 |
| apple tvos | v < 7.0.3 | 7.0.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.