Lucene search
HistoryNov 25, 2008 - 11:30 p.m.
CVE-2008-4232
safari
apple
iphone os
ipod touch
iframe
ui spoofing
cve-2008-4232
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.5%
Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME’s content display to the boundaries of the IFRAME, which allows remote attackers to spoof a user interface via a crafted HTML document.
Affected configurations
Node
appleipod_touch
ORappleiphone_os
applesafari
ORappleiphone_osMatch1.0
ORappleiphone_osMatch1.0.1
ORappleiphone_osMatch1.0.2
ORappleiphone_osMatch1.1
ORappleiphone_osMatch1.1.1
ORappleiphone_osMatch1.1.2
ORappleiphone_osMatch1.1.3
ORappleiphone_osMatch1.1.4
ORappleiphone_osMatch1.1.5
ORappleiphone_osMatch2.0
ORappleiphone_osMatch2.0.1
ORappleiphone_osMatch2.0.2
ORappleiphone_osMatch2.1
Related
nvd
nvd
CVE-2008-4232
2008-11-25 23:30:00
prion
prion
Design/Logic Flaw
2008-11-25 23:30:00
cvelist
cvelist
CVE-2008-4232
2008-11-25 23:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.5%
Related for CVE-2008-4232