CVE

Id
68641  
CVE No.
CVE-2014-1346  
Status
Candidate  
Description
WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, does not properly interpret Unicode encoding, which allows remote attackers to spoof a postMessage origin, and bypass intended restrictions on sending a message to a connected frame or window, via crafted characters in a URL.  
Phase
Assigned (20140108)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
659525 68641 CVE-2014-1346 CONFIRM:http://support.apple.com/kb/HT6254  View
659526 68641 CVE-2014-1346 APPLE:APPLE-SA-2014-05-21-1  View
659527 68641 CVE-2014-1346 URL:http://archives.neohapsis.com/archives/bugtraq/2014-05/0128.html  View
659528 68641 CVE-2014-1346 APPLE:APPLE-SA-2014-06-30-3  View
659529 68641 CVE-2014-1346 URL:http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html  View
659530 68641 CVE-2014-1346 BID:67554  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14187 JVNDB-2014-003062 Apple iOS の CoreGraphics における任意のコードを実行される脆弱性 Apple iOS の CoreGraphics は、XBM 画像処理のためのスタックメモリの割り当てを適切に制限しないため、任意のコードを実行される、またはサービス運用妨害 (アプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-1354 68641 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003062.html  View