Bug 906374 - (CVE-2014-4459) VUL-0: CVE-2014-4459: libwebkit1_0,libwebkit: Use-after-free vulnerability in WebKit
(CVE-2014-4459)
VUL-0: CVE-2014-4459: libwebkit1_0,libwebkit: Use-after-free vulnerability in...
Status: NEW
Classification: Novell Products
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents
unspecified
Other Other
: P3 - Medium : Major
: ---
Assigned To: Federico Mena Quintero
Security Team bot
https://smash.suse.de/issue/110824/
CVSSv2:NVD:CVE-2014-4459:6.8:(AV:N/AC...
:
Depends on: 1069669
Blocks:
  Show dependency treegraph
 
Reported: 2014-11-20 12:37 UTC by Johannes Segitz
Modified: 2019-08-28 22:56 UTC (History)
1 user (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Segitz 2014-11-20 12:37:54 UTC
No further details available.

Use-after-free vulnerability in WebKit, as used in Apple OS X before 10.10.1,
allows remote attackers to execute arbitrary code via crafted page objects in an
HTML document.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4459
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4459
Comment 1 Swamp Workflow Management 2014-11-20 23:02:47 UTC
bugbot adjusting priority
Comment 3 Federico Mena Quintero 2015-01-17 02:02:53 UTC
Apple has not released information on which version of webkit fixes this problem.  We'll have to wait a bit; it will get merged in due time into webkitgtk 2.4.x.
Comment 4 Johannes Segitz 2015-04-08 14:02:59 UTC
(In reply to Federico Mena Quintero from comment #3)
Was this already included?