medium5.0
CVE-2014-1297
WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass …
Impact
WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | through 6.1.2 Versions 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4 |