CVE-2014-4465
CVE-2014-4465
This page contains facts from public vulnerability sources. Check the original advisory before updating.
WebKit in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1 allows remote attackers to bypass the Same Origin Policy via crafted Cascading Style Sheets (CSS) token sequences within an SVG file in the SRC attribute of an IMG element.
EPSS 2.2%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
qtwebkit-opensource-src Ubuntu:16.04:LTS
- Versions
- 5.4.2+dfsg-1ubuntu2.1
- 5.5.1+dfsg-2ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebkit-source Ubuntu:16.04:LTS
- Versions
- 2.3.2-0ubuntu10
- 2.3.2-0ubuntu11
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- http://support.apple.com/HT204245
- http://support.apple.com/HT204246
- http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html
- http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html
- http://support.apple.com/kb/HT6596
- http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html
- https://nvd.nist.gov/vuln/detail/CVE-2014-4465