WebKit Multiple Unspecified Memory Corruption Vulnerabilities

Bugtraq ID:	68271
Class:	Unknown
CVE:	CVE-2014-1325 CVE-2014-1362 CVE-2014-1363 CVE-2014-1364 CVE-2014-1365 CVE-2014-1366 CVE-2014-1367 CVE-2014-1368 CVE-2014-1382
Remote:	Yes
Local:	No
Published:	Jun 30 2014 12:00AM
Updated:	Oct 17 2014 07:03PM
Credit:	Apple, miaubiz, Google Chrome Security Team, Wushi of Keen Team (Research Team of Keen Cloud Tech), and Renata Hodovan of University of Szeged / Samsung Electronics
Vulnerable:	WebKit Open Source Project WebKit 1.2.5 WebKit Open Source Project WebKit 1.2.3 WebKit Open Source Project WebKit 1.2.2 WebKit Open Source Project WebKit 2 WebKit Open Source Project WebKit 1.2.2-1 eSignal eSignal 6.0.2 Apple iTunes 10.5.1 Apple iTunes 9.2.1 Apple iTunes 9.0.2 Apple iTunes 9.0.1 .8 Apple iTunes 9.0.1 Apple iTunes 9.0 Apple iTunes 7.3.2 Apple iTunes 7.3.1 Apple iTunes 7.3 Apple iTunes 7.0.2 Apple iTunes 6.0.5 Apple iTunes 6.0.4 Apple iTunes 6.0.3 Apple iTunes 6.0.1 Apple iTunes 6.0 Apple iTunes 5.0 Apple iTunes 4.8 Apple iTunes 4.7.1 Apple iTunes 4.7 Apple iTunes 4.6 Apple iTunes 4.5 Apple iTunes 4.2 .72 Apple iTunes 9.2 Apple iTunes 9.1 Apple iTunes 8.2 Apple iTunes 8.1 Apple iTunes 8.0.2.20 Apple iTunes 8.0 Apple iTunes 7.4 Apple iTunes 10.6 Apple iTunes 10.5 Apple iTunes 10.2.2 Apple iTunes 10.2 Apple iTunes 10.1 Apple iTunes 10 Apple iPhone 4.3.3 Apple iPhone 4.3.2 Apple iPhone 4.3.1 Apple iPhone 4.3.0 Apple iPhone 4.2.8 Apple iPhone 4.2.5 Apple iPhone 4.2.1 Apple iPhone 4.1 Apple iPhone 4.0.2 Apple iPhone 4.0 Apple iPad 3.2.1 Apple iPad 3.2.2 Apple iPad 3.2 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 beta Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 Apple Apple TV 5.0 Apple Apple TV 4.4 Apple Apple TV 4.3 Apple Apple TV 4.2 Apple Apple TV 4.1 Apple Apple TV 4.0 Apple Apple TV 2.1
Not Vulnerable:

WebKit Multiple Unspecified Memory Corruption Vulnerabilities

WebKit is prone to multiple unspecified memory-corruption vulnerabilities.

An attacker may exploit these issues by enticing victims into viewing a malicious webpage.

Successful exploits may allow attackers to execute arbitrary code in the context of the affected browser or cause denial-of-service conditions; other attacks may also be possible.

WebKit Multiple Unspecified Memory Corruption Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

WebKit Multiple Unspecified Memory Corruption Vulnerabilities

Solution:
Apple has released updates to address these issues for Safari. Updates for other applications utilizing WebKit are not yet known to be available.

WebKit Multiple Unspecified Memory Corruption Vulnerabilities

References:

• Apple iOS Homepage (Apple)
  
• Apple Safari Homepage (Apple)
  
• Apple TV Homepage (Apple)
  
• Webkit Homepage (WebKit)