CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
96.2%
Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability than CVE-2008-2307.
Vendor | Product | Version | CPE |
---|---|---|---|
apple | iphone | 1.0 | cpe:2.3:h:apple:iphone:1.0:*:*:*:*:*:*:* |
apple | iphone | 1.1.3 | cpe:2.3:h:apple:iphone:1.1.3:*:*:*:*:*:*:* |
apple | iphone | 1.1.4 | cpe:2.3:h:apple:iphone:1.1.4:*:*:*:*:*:*:* |
apple | iphone | 1.02 | cpe:2.3:h:apple:iphone:1.02:*:*:*:*:*:*:* |
apple | ipod_touch | 1.1 | cpe:2.3:h:apple:ipod_touch:1.1:*:*:*:*:*:*:* |
apple | ipod_touch | 1.1.1 | cpe:2.3:h:apple:ipod_touch:1.1.1:*:*:*:*:*:*:* |
apple | ipod_touch | 1.1.2 | cpe:2.3:h:apple:ipod_touch:1.1.2:*:*:*:*:*:*:* |
apple | ipod_touch | 1.1.3 | cpe:2.3:h:apple:ipod_touch:1.1.3:*:*:*:*:*:*:* |
apple | ipod_touch | 1.1.4 | cpe:2.3:h:apple:ipod_touch:1.1.4:*:*:*:*:*:*:* |
apple | iphone_os | 1.0.1 | cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:* |
lists.apple.com/archives/security-announce//2008/Nov/msg00001.html
lists.apple.com/archives/security-announce/2008//Jul/msg00001.html
secunia.com/advisories/31074
secunia.com/advisories/32706
support.apple.com/kb/HT3298
www.securityfocus.com/bid/30186
www.vupen.com/english/advisories/2008/2094/references
exchange.xforce.ibmcloud.com/vulnerabilities/43736