Bug 906374 (CVE-2014-4459) - VUL-0: CVE-2014-4459: libwebkit1_0,libwebkit: Use-after-free vulnerability in WebKit
Summary: VUL-0: CVE-2014-4459: libwebkit1_0,libwebkit: Use-after-free vulnerability in...
Status: RESOLVED NORESPONSE
Alias: CVE-2014-4459
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Major
Target Milestone: ---
Assignee: Federico Mena Quintero
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/110824/
Whiteboard: CVSSv2:NVD:CVE-2014-4459:6.8:(AV:N/AC...
Keywords:
Depends on: 1069669
Blocks:
  Show dependency tree / graph
 
Reported: 2014-11-20 12:37 UTC by Johannes Segitz
Modified: 2024-07-26 11:07 UTC (History)
2 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Segitz 2014-11-20 12:37:54 UTC 
No further details available.

Use-after-free vulnerability in WebKit, as used in Apple OS X before 10.10.1,
allows remote attackers to execute arbitrary code via crafted page objects in an
HTML document.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4459
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4459
Comment 1 Swamp Workflow Management 2014-11-20 23:02:47 UTC 
bugbot adjusting priority
Comment 3 Federico Mena Quintero 2015-01-17 02:02:53 UTC 
Apple has not released information on which version of webkit fixes this problem.  We'll have to wait a bit; it will get merged in due time into webkitgtk 2.4.x.
Comment 4 Johannes Segitz 2015-04-08 14:02:59 UTC 
(In reply to Federico Mena Quintero from comment #3)
Was this already included?