CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
Low
EPSS
Percentile
93.4%
Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service (browser crash) via a JavaScript alert call with an argument that lacks breakable characters and has a length that is a multiple of the memory page size, leading to an out-of-bounds read.
Vendor | Product | Version | CPE |
---|---|---|---|
apple | iphone | 1.1.4 | cpe:2.3:h:apple:iphone:1.1.4:*:*:*:*:*:*:* |
apple | iphone | 2.0 | cpe:2.3:h:apple:iphone:2.0:*:*:*:*:*:*:* |
apple | ipod_touch | 1.1.4 | cpe:2.3:h:apple:ipod_touch:1.1.4:*:*:*:*:*:*:* |
apple | ipod_touch | 2.0 | cpe:2.3:h:apple:ipod_touch:2.0:*:*:*:*:*:*:* |
apple | safari | * | cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* |