Bug 906375 (CVE-2014-4462) - VUL-0: CVE-2014-4462: libwebkit1_0,libwebkit: WebKit allows remote attackers to execute arbitrary code
Summary: VUL-0: CVE-2014-4462: libwebkit1_0,libwebkit: WebKit allows remote attackers ...
Status: RESOLVED NORESPONSE
Alias: CVE-2014-4462
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Major
Target Milestone: ---
Assignee: Federico Mena Quintero
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/110827/
Whiteboard: CVSSv2:NVD:CVE-2014-4462:5.8:(AV:A/AC...
Keywords:
Depends on: 1069669
Blocks:
  Show dependency tree / graph
 
Reported: 2014-11-20 12:39 UTC by Johannes Segitz
Modified: 2024-07-26 11:07 UTC (History)
2 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Segitz 2014-11-20 12:39:09 UTC 
No further details available.

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows
remote attackers to execute arbitrary code or cause a denial of service (memory
corruption and application crash) via a crafted web site, a different
vulnerability than CVE-2014-4452.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4462
http://www.cvedetails.com/cve/CVE-2014-4462/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4462
Comment 1 Swamp Workflow Management 2014-11-20 23:02:56 UTC 
bugbot adjusting priority
Comment 3 Federico Mena Quintero 2015-01-17 02:03:11 UTC 
Apple has not released information on which version of webkit fixes this problem.  We'll have to wait a bit; it will get merged in due time into webkitgtk 2.4.x.
Comment 4 Johannes Segitz 2015-04-08 14:03:03 UTC 
(In reply to Federico Mena Quintero from comment #3)
Was this already included?