PT-2014-4125 · Apple · Safari+1

Published 2014-07-01 · Updated 2017-01-07 · CVE-2014-1345

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5

Description The issue allows remote attackers to spoof the address bar via a crafted web site, due to improper encoding of domain names in URLs.

Recommendations For Apple iOS versions prior to 7.1.2, update to version 7.1.2 or later. For Apple Safari versions prior to 6.1.5, update to version 6.1.5 or later. For Apple Safari 7.x versions prior to 7.0.5, update to version 7.0.5 or later.

Fix

Related Identifiers

CVE-2014-1345

Affected Products

Safari

Ios

References · 9

• https://ubuntu.com/security/CVE-2014-1345 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-1345 · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-1345 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-1345 · Security Note
• http://secunia.com/advisories/59481 · Note
• http://securityfocus.com/bid/68276 · Note
• http://securitytracker.com/id/1030495 · Note