CVE-2014-1303
🔴 Łataj teraz
Przepełnienie bufora w Apple Safari umożliwia zdalne wykonanie kodu i obejście mechanizmu sandbox.
CVSS
10.0
EPSS
44.8%
Exploit
none
Vendor
apple
Opis źródłowy (NVD)
Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Liang Chen during a Pwn2Own competition at CanSecWest 2014.
buffer-overflow
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 10.0 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 44.8% |
| Opublikowano (NVD) | 2014-03-26 14:55:05 UTC |
| Ostatnia modyfikacja (NVD) | 2026-05-06 22:30:45 UTC |
Referencje
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html (product-security@apple.com)
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0135.html (product-security@apple.com)
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0136.html (product-security@apple.com)
- http://twitter.com/thezdi/statuses/444157530139136000 (product-security@apple.com)
- http://www.pwn2own.com/2014/03/pwn2own-results-thursday-day-two/ (product-security@apple.com)
- https://support.apple.com/kb/HT6537 (product-security@apple.com)