CVE

Id
68640  
CVE No.
CVE-2014-1345  
Status
Candidate  
Description
WebKit in Apple iOS before 7.1.2 and Apple Safari before 6.1.5 and 7.x before 7.0.5 does not properly encode domain names in URLs, which allows remote attackers to spoof the address bar via a crafted web site.  
Phase
Assigned (20140108)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
659516 68640 CVE-2014-1345 APPLE:APPLE-SA-2014-06-30-1  View
659517 68640 CVE-2014-1345 URL:http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html  View
659518 68640 CVE-2014-1345 APPLE:APPLE-SA-2014-06-30-3  View
659519 68640 CVE-2014-1345 URL:http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html  View
659520 68640 CVE-2014-1345 BID:68276  View
659521 68640 CVE-2014-1345 URL:http://www.securityfocus.com/bid/68276  View
659522 68640 CVE-2014-1345 SECTRACK:1030495  View
659523 68640 CVE-2014-1345 URL:http://www.securitytracker.com/id/1030495  View
659524 68640 CVE-2014-1345 SECUNIA:59481  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14186 JVNDB-2014-003061 Apple iOS のロック画面におけるロック保護メカニズムを回避される脆弱性 Apple iOS のロック画面は、機内モードの telephony の状態を適切に管理しないため、ロック保護メカニズムを回避され、特定のフォアグラウンドアプリケーションにアクセスされる脆弱性が存在します。 CVE-2014-1353 68640 3.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003061.html  View