Candidate: CVE-2014-1364 PublicDate: 2014-07-01 10:17:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1364 http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html http://archives.neohapsis.com/archives/bugtraq/2014-06/0175.html http://www.securitytracker.com/id/1030495 http://secunia.com/advisories/59481 Description: WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, and APPLE-SA-2014-06-30-4. Ubuntu-Description: Notes: jdstrand> webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQ#webkit jdstrand> webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8 Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_webkit: upstream_webkit: needs-triage precise_webkit: ignored (see notes) trusty_webkit: DNE trusty/esm_webkit: DNE vivid_webkit: DNE vivid/stable-phone-overlay_webkit: DNE vivid/ubuntu-core_webkit: DNE wily_webkit: DNE xenial_webkit: DNE yakkety_webkit: DNE devel_webkit: DNE Patches_webkitgtk: upstream_webkitgtk: needs-triage precise_webkitgtk: DNE trusty_webkitgtk: not-affected (2.4.8-1ubuntu1~ubuntu14.04.1) trusty/esm_webkitgtk: DNE (trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]) vivid_webkitgtk: ignored (reached end-of-life) vivid/stable-phone-overlay_webkitgtk: DNE vivid/ubuntu-core_webkitgtk: DNE wily_webkitgtk: not-affected (2.4.9-2ubuntu2) xenial_webkitgtk: not-affected (2.4.9-2ubuntu2) yakkety_webkitgtk: not-affected (2.4.9-2ubuntu2) devel_webkitgtk: not-affected (2.4.9-2ubuntu2) Patches_qtwebkit-source: upstream_qtwebkit-source: needs-triage precise_qtwebkit-source: ignored (see notes) trusty_qtwebkit-source: ignored (no update available) trusty/esm_qtwebkit-source: DNE (trusty was ignored [no update available]) vivid_qtwebkit-source: ignored (reached end-of-life) vivid/stable-phone-overlay_qtwebkit-source: DNE vivid/ubuntu-core_qtwebkit-source: DNE wily_qtwebkit-source: ignored (reached end-of-life) xenial_qtwebkit-source: ignored (no update available) yakkety_qtwebkit-source: ignored (no update available) devel_qtwebkit-source: ignored (no update available) Patches_qtwebkit-opensource-src: upstream_qtwebkit-opensource-src: needs-triage precise_qtwebkit-opensource-src: DNE trusty_qtwebkit-opensource-src: ignored (no update available) trusty/esm_qtwebkit-opensource-src: DNE (trusty was ignored [no update available]) vivid_qtwebkit-opensource-src: ignored (reached end-of-life) vivid/stable-phone-overlay_qtwebkit-opensource-src: DNE vivid/ubuntu-core_qtwebkit-opensource-src: DNE wily_qtwebkit-opensource-src: ignored (reached end-of-life) xenial_qtwebkit-opensource-src: ignored (no update available) esm-infra/xenial_qtwebkit-opensource-src: ignored (no update available) yakkety_qtwebkit-opensource-src: ignored (no update available) devel_qtwebkit-opensource-src: ignored (no update available)