Unscored CVE-2014-4467 EUVD-2014-4394GHSA-cvpw-fqmx-ggx7

WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which a…

Published Jan 30, 2015 · Updated Aug 6, 2024 · Assigned by apple

Package: qtwebkit-opensource-src Package: qtwebkit-source Ecosystem: Ubuntu

Description

WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote attackers to spoof the UI via a crafted web site.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	qtwebkit-source +1	No fix yet	—

References

http://support.apple.com/HT204245
APPLE-SA-2015-01-27-2 vendor-advisory