{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)",
    "tracking": {
      "current_release_date": "2026-08-11T13:56:12+00:00",
      "generator": {
        "date": "2026-08-11T13:56:12+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.3.0"
        }
      },
      "id": "CVE-2014-1330",
      "initial_release_date": "2015-01-26T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T13:56:12+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 6-els",
            "product": {
              "name": "Red Hat Enterprise Linux 6-els",
              "product_id": "rhel-6-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7-els",
            "product": {
              "name": "Red Hat Enterprise Linux 7-els",
              "product_id": "rhel-7-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libwebkit2gtk",
            "product": {
              "name": "libwebkit2gtk",
              "product_id": "libwebkit2gtk",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libwebkit2gtk"
              }
            }
          },
          {
            "category": "product_version",
            "name": "webkitgtk",
            "product": {
              "name": "webkitgtk",
              "product_id": "webkitgtk",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/webkitgtk"
              }
            }
          },
          {
            "category": "product_version",
            "name": "webkitgtk-debuginfo",
            "product": {
              "name": "webkitgtk-debuginfo",
              "product_id": "webkitgtk-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/webkitgtk-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "webkitgtk-devel",
            "product": {
              "name": "webkitgtk-devel",
              "product_id": "webkitgtk-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/webkitgtk-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "webkitgtk-doc",
            "product": {
              "name": "webkitgtk-doc",
              "product_id": "webkitgtk-doc",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/webkitgtk-doc"
              }
            }
          },
          {
            "category": "product_version",
            "name": "webkitgtk",
            "product": {
              "name": "webkitgtk",
              "product_id": "webkitgtk.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/webkitgtk?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "webkitgtk3",
            "product": {
              "name": "webkitgtk3",
              "product_id": "webkitgtk3",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/webkitgtk3"
              }
            }
          },
          {
            "category": "product_version",
            "name": "webkitgtk3-debuginfo",
            "product": {
              "name": "webkitgtk3-debuginfo",
              "product_id": "webkitgtk3-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/webkitgtk3-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "webkitgtk3-devel",
            "product": {
              "name": "webkitgtk3-devel",
              "product_id": "webkitgtk3-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/webkitgtk3-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "webkitgtk3-doc",
            "product": {
              "name": "webkitgtk3-doc",
              "product_id": "webkitgtk3-doc",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/webkitgtk3-doc"
              }
            }
          },
          {
            "category": "product_version",
            "name": "webkitgtk3",
            "product": {
              "name": "webkitgtk3",
              "product_id": "webkitgtk3.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/webkitgtk3?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwebkit2gtk as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:libwebkit2gtk"
        },
        "product_reference": "libwebkit2gtk",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkitgtk as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:webkitgtk"
        },
        "product_reference": "webkitgtk",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkitgtk-debuginfo as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:webkitgtk-debuginfo"
        },
        "product_reference": "webkitgtk-debuginfo",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkitgtk-devel as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:webkitgtk-devel"
        },
        "product_reference": "webkitgtk-devel",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkitgtk-doc as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:webkitgtk-doc"
        },
        "product_reference": "webkitgtk-doc",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkitgtk.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:webkitgtk.src"
        },
        "product_reference": "webkitgtk.src",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkitgtk3 as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:webkitgtk3"
        },
        "product_reference": "webkitgtk3",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkitgtk3-debuginfo as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:webkitgtk3-debuginfo"
        },
        "product_reference": "webkitgtk3-debuginfo",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkitgtk3-devel as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:webkitgtk3-devel"
        },
        "product_reference": "webkitgtk3-devel",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkitgtk3-doc as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:webkitgtk3-doc"
        },
        "product_reference": "webkitgtk3-doc",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkitgtk3.src as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:webkitgtk3.src"
        },
        "product_reference": "webkitgtk3.src",
        "relates_to_product_reference": "rhel-7-els.els"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-1330",
      "discovery_date": "2015-01-27T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "rhel-6-els.els:webkitgtk-debuginfo",
            "rhel-6-els.els:webkitgtk-devel",
            "rhel-6-els.els:webkitgtk-doc",
            "rhel-7-els.els:webkitgtk3-debuginfo",
            "rhel-7-els.els:webkitgtk3-devel",
            "rhel-7-els.els:webkitgtk3-doc"
          ]
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "Red Hat Product Security has rated this issue as having Moderate security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_affected": [
          "rhel-6-els.els:webkitgtk",
          "rhel-6-els.els:webkitgtk.src",
          "rhel-7-els.els:libwebkit2gtk",
          "rhel-7-els.els:webkitgtk3",
          "rhel-7-els.els:webkitgtk3.src"
        ],
        "known_not_affected": [
          "rhel-6-els.els:webkitgtk-debuginfo",
          "rhel-6-els.els:webkitgtk-devel",
          "rhel-6-els.els:webkitgtk-doc",
          "rhel-7-els.els:webkitgtk3-debuginfo",
          "rhel-7-els.els:webkitgtk3-devel",
          "rhel-7-els.els:webkitgtk3-doc"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1330"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1330"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1330"
        }
      ],
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Will not fix",
          "product_ids": [
            "rhel-6-els.els:webkitgtk",
            "rhel-6-els.els:webkitgtk.src",
            "rhel-7-els.els:libwebkit2gtk",
            "rhel-7-els.els:webkitgtk3",
            "rhel-7-els.els:webkitgtk3.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "version": "2.0",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore": 5.1
          },
          "products": [
            "rhel-6-els.els:webkitgtk",
            "rhel-6-els.els:webkitgtk-debuginfo",
            "rhel-6-els.els:webkitgtk-devel",
            "rhel-6-els.els:webkitgtk-doc",
            "rhel-6-els.els:webkitgtk.src",
            "rhel-7-els.els:libwebkit2gtk",
            "rhel-7-els.els:webkitgtk3",
            "rhel-7-els.els:webkitgtk3-debuginfo",
            "rhel-7-els.els:webkitgtk3-devel",
            "rhel-7-els.els:webkitgtk3-doc",
            "rhel-7-els.els:webkitgtk3.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "rhel-6-els.els:webkitgtk",
            "rhel-6-els.els:webkitgtk-debuginfo",
            "rhel-6-els.els:webkitgtk-devel",
            "rhel-6-els.els:webkitgtk-doc",
            "rhel-6-els.els:webkitgtk.src",
            "rhel-7-els.els:libwebkit2gtk",
            "rhel-7-els.els:webkitgtk3",
            "rhel-7-els.els:webkitgtk3-debuginfo",
            "rhel-7-els.els:webkitgtk3-devel",
            "rhel-7-els.els:webkitgtk3-doc",
            "rhel-7-els.els:webkitgtk3.src"
          ]
        }
      ],
      "title": "arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)"
    }
  ]
}