Out-of-Bounds Affecting libwebkit2gtk package, versions *
Threat Intelligence
EPSS
0.83% (83rd
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-RHEL7-LIBWEBKIT2GTK-1327359
- published 26 Jul 2021
- disclosed 8 Nov 2014
Introduced: 8 Nov 2014
CVE-2014-1388 Open this link in a new tabHow to fix?
There is no fixed version for RHEL:7
libwebkit2gtk
.
NVD Description
Note: Versions mentioned in the description apply only to the upstream libwebkit2gtk
package and not the libwebkit2gtk
package as distributed by RHEL
.
See How to fix?
for RHEL:7
relevant fixed versions and status.
WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367.
References
- http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html
- http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html
- http://www.securityfocus.com/bid/69223
- https://support.apple.com/kb/HT6537
- http://support.apple.com/kb/HT6367
- http://support.apple.com/kb/HT6441
- http://support.apple.com/kb/HT6442
- https://access.redhat.com/security/cve/CVE-2014-1388
- https://security.gentoo.org/glsa/201601-02
- http://www.securitytracker.com/id/1030731
- http://secunia.com/advisories/60705
- http://secunia.com/advisories/61318
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95271
CVSS Scores
version 3.1