Homepage

Out-of-Bounds The advisory has been revoked - it doesn't affect any version of package webkitgtk  (opens in a new tab)

Threat Intelligence

EPSS
0.91% (83rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1604-WEBKITGTK-630841
  • published10 Sept 2020
  • disclosed18 Sept 2014
Report a new vulnerability Found a mistake?

Introduced: 18 Sep 2014

CVE-2014-4412  (opens in a new tab)
CWE-119  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:16.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream webkitgtk package and not the webkitgtk package as distributed by Ubuntu.

WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.