Buffer overflow in Apple Iphone OS
CVE-2013-5197
WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-12-16-1.
Vulnerability class: Buffer Overflow
EPSS: 0.021 (80.2th percentile) — read the EPSS interpretation.
Affected products
- Apple Iphone_os
- Apple Itunes
- Apple Safari — versions 6.0, 6.0.1, 6.0.2
- Apple Tvos
- Apple Webkit
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Broken Link)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Broken Link)