CVE

Id
71761  
CVE No.
CVE-2014-4465  
Status
Candidate  
Description
WebKit in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1 allows remote attackers to bypass the Same Origin Policy via crafted Cascading Style Sheets (CSS) token sequences within an SVG file in the SRC attribute of an IMG element.  
Phase
Assigned (20140620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
681875 71761 CVE-2014-4465 CONFIRM:http://support.apple.com/kb/HT6596  View
681876 71761 CVE-2014-4465 CONFIRM:http://support.apple.com/HT204245  View
681877 71761 CVE-2014-4465 CONFIRM:http://support.apple.com/HT204246  View
681878 71761 CVE-2014-4465 APPLE:APPLE-SA-2014-12-2-1  View
681879 71761 CVE-2014-4465 URL:http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html  View
681880 71761 CVE-2014-4465 APPLE:APPLE-SA-2015-01-27-1  View
681881 71761 CVE-2014-4465 URL:http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html  View
681882 71761 CVE-2014-4465 APPLE:APPLE-SA-2015-01-27-2  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
17018 JVNDB-2014-005893 Apple Safari などで使用される WebKit における任意のコードを実行される脆弱性 Apple Safari などで使用される WebKit には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損およびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-4473 71761 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005893.html  View