Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-1255 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Type Services (ATS) in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150
CVE ID: CVE-2014-1256 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150
CVE ID: CVE-2014-1257 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action, which allows physically proximate attackers to bypass intended access restrictions by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150
CVE ID: CVE-2014-1258 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in CoreAnimation in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150
CVE ID: CVE-2014-1259 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in File Bookmark in Apple OS X before 10.9.2 allows attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150
CVE ID: CVE-2014-1260 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickLook in Apple OS X through 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Microsoft Office document. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150
CVE ID: CVE-2014-1261 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Unicode font. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150
CVE ID: CVE-2014-1262 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages that trigger memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150
CVE ID: CVE-2014-1263 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: curl and libcurl 7.27.0 through 7.35.0, when using the SecureTransport/Darwinssl backend, as used in in Apple OS X 10.9.x before 10.9.2, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate when accessing a URL that uses a numerical IP address, which allows man-in-the-middle attackers to spoof servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/rmoriz/fb2b
valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/rmoriz/fb2b0a6a0ce10550ab73 - http://secunia.com/advisories/57836 - http://support.apple.com/kb/HT6150 - http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/ - http://twitter.com/agl__/statuses/437029812046422016 - http://curl.haxx.se/docs/adv_20140326C.html - http://secunia.com/advisories/57968 - http://twitter.com/okoeroo/statuses/437272014043496449 - http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/ - http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/ - http://secunia.com/advisories/57966
CVE ID: CVE-2014-1264 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Finder in Apple OS X before 10.9.2 does not ensure ACL integrity after the viewing of file ACL information, which allows local users to bypass intended access restrictions in opportunistic circumstances via standard filesystem operations on a file with a damaged ACL. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150
CVE ID: CVE-2014-1265 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local users to bypass intended access restrictions by changing the current time on the system clock. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150
CVE ID: CVE-2014-1266 State: PUBLISHED Published: 2014-02-22T15:00:00 Last Updated: 2024-08-06T09:34:41.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step. Additional Analyst Notes: - CVE Program Contai
itrary private key for the signing step or (2) omitting the signing step. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6147 - http://support.apple.com/kb/HT6148 - https://www.cs.columbia.edu/~smb/blog/2014-02/2014-02-23.html - http://support.apple.com/kb/HT6150 - http://support.apple.com/kb/HT6146 - http://it.slashdot.org/comments.pl?sid=4821073&cid=46310187 - https://www.cs.columbia.edu/~smb/blog/2014-02/2014-02-24.html - https://www.imperialviolet.org/2014/02/22/applebug.html - https://news.ycombinator.com/item?id=7281378
CVE ID: CVE-2014-1267 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Configuration Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 does not properly evaluate the expiration date of a mobile configuration profile, which allows attackers to bypass intended access restrictions by using a profile after the date has passed. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1268 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1269 and CVE-2014-1270. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6145 - https://support.apple.com/kb/HT6537
CVE ID: CVE-2014-1269 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1268 and CVE-2014-1270. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6145 - http://support.apple.com/kb/HT6163 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1270 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1268 and CVE-2014-1269. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6145 - http://support.apple.com/kb/HT6163 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1271 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreCapture in Apple iOS before 7.1 and Apple TV before 6.1 does not properly validate IOKit API calls, which allows attackers to cause a denial of service (assertion failure and device crash) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1272 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: CrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to change arbitrary file permissions by leveraging a symlink. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1273 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: dyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-signing requirements by leveraging use of text-relocation instructions in a dynamic library. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1274 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: FaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1275 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ImageIO in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG2000 data in a PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1276 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOKit HID Event in Apple iOS before 7.1 allows attackers to conduct user-action monitoring attacks against arbitrary apps via a crafted app that accesses an IOKit framework interface. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1277 State: REJECTED Published: 2014-03-13T10:00:00 Last Updated: 2014-03-13T07:57:01 Description: No description available.
CVE ID: CVE-2014-1278 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ptmx_get_ioctl function in the ARM kernel in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to gain privileges or cause a denial of service (out-of-bounds memory access and device crash) via a crafted call. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1279 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple TV before 6.1 does not properly restrict logging, which allows local users to obtain sensitive information by reading log data. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163
CVE ID: CVE-2014-1280 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Video Driver in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to cause a denial of service (NULL pointer dereference and device hang) via a crafted video file with MPEG-4 encoding. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1281 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Photos Backend in Apple iOS before 7.1 does not properly manage the asset-library cache during deletions, which allows physically proximate attackers to obtain sensitive photo data by launching the Photos app and looking under a transparent image. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1282 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass intended configuration-profile visibility requirements via a long name. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1283 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1284 State: REJECTED Published: 2014-03-13T10:00:00 Last Updated: 2014-03-13T07:57:01 Description: No description available.
CVE ID: CVE-2014-1285 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Springboard in Apple iOS before 7.1 allows physically proximate attackers to bypass intended access restrictions and read the home screen by leveraging an application crash during activation of an unactivated device. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1286 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpringBoard Lock Screen in Apple iOS before 7.1 allows remote attackers to cause a denial of service (lock-screen hang) by leveraging a state-management error. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1287 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted USB messages. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - http://support.apple.com/kb/HT6162
CVE ID: CVE-2014-1288 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1289 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1290, CVE-2014-1291, CVE-2014-1292, CVE-2014-1293, and CVE-2014-1294. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6162 - http://archives.neohapsis.com/archi
/HT6163 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6162 - http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html
CVE ID: CVE-2014-1290 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1291, CVE-2014-1292, CVE-2014-1293, and CVE-2014-1294. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6162 - http://archives.neohapsis.com/archi
CVE ID: CVE-2014-1291 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1292, CVE-2014-1293, and CVE-2014-1294. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6162 - http://archives.neohapsis.com/archi
CVE ID: CVE-2014-1292 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1293, and CVE-2014-1294. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6162 - http://archives.neohapsis.com/archi
CVE ID: CVE-2014-1293 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292, and CVE-2014-1294. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6162 - http://archives.neohapsis.com/archi
CVE ID: CVE-2014-1294 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:34:41.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292, and CVE-2014-1293. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6162 - http://archives.neohapsis.com/archi
CVE ID: CVE-2014-1295 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T09:34:41.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Transport in Apple iOS before 7.1.1, Apple OS X 10.8.x and 10.9.x through 10.9.2, and Apple TV before 6.1.1 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple handshake attack." Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html - http://archives.neohapsis.com/archive
: References: - http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html - http://archives.neohapsis.com/archives/bugtraq/2014-04/0136.html - http://archives.neohapsis.com/archives/bugtraq/2014-04/0135.html - https://secure-resumption.com/
CVE ID: CVE-2014-1296 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T09:34:41.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does not ensure that a Set-Cookie HTTP header is complete before interpreting the header's value, which allows remote attackers to bypass intended access restrictions by triggering the closing of a TCP connection during transmission of a header, as demonstrated by an HTTPOnly restriction. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html - http://archives.neoh
Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html - http://archives.neohapsis.com/archives/bugtraq/2014-04/0136.html - http://archives.neohapsis.com/archives/bugtraq/2014-04/0135.html
CVE ID: CVE-2014-1297 State: PUBLISHED Published: 2014-04-02T15:00:00 Last Updated: 2024-08-06T09:34:41.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html