CVE-2008-1588

Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL...

CVE-2008-1589

Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a 1 self-signed or 2 invalid certificate, which makes it easier for remote attackers to spoof web sites...

Design/Logic Flaw

WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remote attackers to execute arbitrary code or cause a denial of service heap corruption and application crash via a reference to the ownerNode property of a copied CSSStyleSheet obje...

CVE-2008-2303

Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability...

Memory corruption

JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors that trigger memory corruption, a...

CVE-2008-1590

JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors that trigger memory corruption, a...

Integer overflow

Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability...

CVE-2008-1589

CVE-2008-1589 affects Safari on Apple iPhone/iPod touch prior to v2.0. The issue: when visiting a site with a self-signed or invalid certificate, pressing the menu button during the certificate prompt can cause the certificate acceptance on the next visit, enabling potential MITM or credential ex...

CVE-2008-1588

CVE-2008-1588 affects Safari on Apple iPhone before 2.0 and iPod touch before 2.0. The underlying issue lets remote attackers spoof the address bar by using Unicode ideographic spaces in the URL, potentially deceiving users about the site they visit. The vulnerability references indicate affected...

CVE-2008-1589

Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a 1 self-signed or 2 invalid certificate, which makes it easier for remote attackers to spoof web sites...

CVE-2008-2303

Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability...

CVE-2008-2303

CVE-2008-2303 affects Safari on Apple iPhone before 2.0 and iPod touch before 2.0. It is caused by an integer signedness error in handling JavaScript array indices, which can trigger an out-of-bounds access. The result can be remote arbitrary code execution or a denial of service (application cra...

CVE-2008-1590

CVE-2008-1590 relates to a memory corruption flaw in WebKit/JavaScriptCore on Apple iPhone and iPod touch before version 2.0, caused by improper runtime garbage collection. This can allow a remote attacker to execute arbitrary code or cause an application crash via memory corruption, via unspecif...

PT-2008-3144 · Apple · Iphone +2

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 2.0 on Apple iPhone and iPod touch Description: The issue allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL. Recommendations: For Safari versions prior to 2.0 on Apple iPhone a...

PT-2008-3146 · Apple · Javascriptcore +3

Name of the Vulnerable Software and Affected Versions: WebKit versions prior to 2.0 on Apple iPhone WebKit versions prior to 2.0 on iPod touch Description: The issue is related to improper runtime garbage collection in JavaScriptCore, which can lead to memory corruption. This can be exploited by...

PT-2008-3794 · Apple · Iphone +2

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 2.0 on Apple iPhone Safari versions prior to 2.0 on iPod touch Description: The issue is related to an integer signedness error that can be triggered via JavaScript array indices, leading to an out-of-bounds access...

Apple iPhone和iPod Touch 2.0版修复多个安全漏洞

BUGTRAQ ID: 30186 CVECAN ID: CVE-2008-1588,CVE-2008-1589,CVE-2008-2303,CVE-2008-2317,CVE-2008-1590 iPod touch（也被称为iTouch）是苹果公司发布的MP4播放器，iPhone是其发布的智能手机。 iPhone和iPod Touch都内嵌了Safari浏览器，远程攻击者可以利用该浏览器中的多个安全漏洞导致拒绝服务、读取敏感信息或执行任意代码。 CVE-2008-1588...

JVN#88676089 Safari installed in iPod touch and iPhone vulnerable in handling server certificates

Safari is a web browser provided by Apple. Safari installed in iPod touch and iPhone accepts a self-signed or invalid server cerficate without the user's explicit concent when connecting via SSL/TLS. According to Apple, "When Safari accesses a website that uses a self-signed or invalid certificat...

PT-2008-3145 · Apple · Safari

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 2.0 on Apple iPhone and iPod touch Description: The issue misinterprets a menu button press as user confirmation for visiting a web site with a self-signed or invalid certificate. This makes it easier for remote...

Apple iPhone Apple iPod Touch 2.0 - Multiple Remote Vulnerabilities

Apple iPhone Apple iPod Touch 2.0 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/30186/info Apple iPhone and iPod touch are prone to multiple remote vulnerabilities: 1. A vulnerability that may allow users to spoof websites. 2. An information-disclosure vulnerability...