Description
Unspecified vulnerability in Apple Safari 7.0.2 on OS X allows remote attackers to execute arbitrary code with root privileges via unknown vectors, as demonstrated by Google during a Pwn4Fun competition at CanSecWest 2014.
References (6)
Core 6
Core References
Third Party Advisory vendor-advisory
x_refsource_apple
http://archives.neohapsis.com/archives/bugtraq/2014-04/0136.html
Vendor Advisory x_refsource_confirm
https://support.apple.com/kb/HT6537
Third Party Advisory vendor-advisory
x_refsource_apple
http://archives.neohapsis.com/archives/bugtraq/2014-04/0135.html
Third Party Advisory vendor-advisory
x_refsource_apple
http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html
Various Sources x_refsource_misc
http://twitter.com/thezdi/statuses/443796547872903168
Various Sources x_refsource_misc
http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/
Scores
EPSS
0.0551
EPSS Percentile
92.0%
Details
Status
published
Products (1)
apple/safari
7.0.2
Published
Mar 26, 2014
Tracked Since
Feb 18, 2026