CVE-2014-4467

Publication date

2015-01-30 11:00:00

Family

apple

State

PUBLISHED

Description

WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote attackers to spoof the UI via a crafted web site.