Lucene search

[email protected]CVE-2008-4231

HistoryNov 25, 2008 - 11:30 p.m.

CVE-2008-4231

2008-11-2523:30:00

CWE-399

[email protected]

web.nvd.nist.gov

safari

apple

iphone os

ipod touch

cve-2008-4231

security

vulnerability

html

table

remote attackers

arbitrary code

denial of service

memory corruption

application crash

nvd

7.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.072 Low

EPSS

Percentile

94.0%

JSON

Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

CPENameOperatorVersion
apple:safariapple safarieq*
apple:iphone_osapple iphone oseq1.0
apple:iphone_osapple iphone oseq1.0.1
apple:iphone_osapple iphone oseq1.0.2
apple:iphone_osapple iphone oseq1.1
apple:iphone_osapple iphone oseq1.1.1
apple:iphone_osapple iphone oseq1.1.2
apple:iphone_osapple iphone oseq1.1.3
apple:iphone_osapple iphone oseq1.1.4
apple:iphone_osapple iphone oseq1.1.5

CPE	Name	Operator	Version
apple:safari	apple safari	eq	*
apple:iphone_os	apple iphone os	eq	1.0
apple:iphone_os	apple iphone os	eq	1.0.1
apple:iphone_os	apple iphone os	eq	1.0.2
apple:iphone_os	apple iphone os	eq	1.1
apple:iphone_os	apple iphone os	eq	1.1.1
apple:iphone_os	apple iphone os	eq	1.1.2
apple:iphone_os	apple iphone os	eq	1.1.3
apple:iphone_os	apple iphone os	eq	1.1.4
apple:iphone_os	apple iphone os	eq	1.1.5

Rows per page:

1-10 of 141

References

lists.apple.com/archives/security-announce/2008/Nov/msg00002.html

lists.apple.com/archives/security-announce/2009/jun/msg00002.html

osvdb.org/50028

secunia.com/advisories/32756

secunia.com/advisories/35379

support.apple.com/kb/HT3318

support.apple.com/kb/HT3613

www.fortiguardcenter.com/advisory/FGA-2009-23.html

www.securityfocus.com/archive/1/504211/100/0/threaded

www.securityfocus.com/bid/32394

www.securitytracker.com/id?1021272

www.vupen.com/english/advisories/2008/3232

www.vupen.com/english/advisories/2009/1522

7.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.072 Low

EPSS

Percentile

94.0%

JSON

Related for CVE-2008-4231

prion1 cvelist1 securityvulns1 nessus2