VYPR
Unrated severityNVD Advisory· Published Jul 1, 2014· Updated Jun 17, 2026

CVE-2014-1345

CVE-2014-1345

Description

WebKit in Apple iOS before 7.1.2 and Apple Safari before 6.1.5 and 7.x before 7.0.5 does not properly encode domain names in URLs, which allows remote attackers to spoof the address bar via a crafted web site.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

28
  • Apple Inc./Safari17 versions
    cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <=6.1.4
    • cpe:2.3:a:apple:safari:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:6.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:6.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:6.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:6.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:6.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:6.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:6.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:7.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:7.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:7.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:7.0.4:*:*:*:*:*:*:*
    • (no CPE)range: <6.1.5 or <7.0.5
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*range: <=7.1.1
    • cpe:2.3:o:apple:iphone_os:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:7.0.1:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:7.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:7.0.3:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:7.0.4:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:7.0.5:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:7.0.6:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:7.1:*:*:*:*:*:*:*
  • Apple Inc./iOSllm-fuzzy
    Range: <7.1.2

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.