WebKit Memory Corruption Vulnerability (CVE-2014-1309)

Release date:
Updated on:

Affected Systems:
Apple Safari 7.x
Apple Safari 6.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 66574
CVE (CAN) ID: CVE-2014-1309
 
WebKit is an open-source browser engine and the name of the Framework Version of Apple Mac OS X System engine.
 
WebKit used in versions earlier than Apple Safari 6.1.3 and earlier than 7.0.3 allows remote attackers to exploit this vulnerability to execute arbitrary code or cause a denial of service.
 
<* Source: cloudfuzzer
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Apple
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://www.apple.com/support/downloads/
Http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html