CVE-2008-3632

Severity

93%

Complexity

86%

Confidentiality

165%

Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a web page with crafted Cascading Style Sheets (CSS) import statements.

Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a web page with crafted Cascading Style Sheets (CSS) import statements.

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

First reported 16 years ago

2008-09-11 01:13:00

Last updated 12 years ago

2012-10-31 03:01:00

Affected Software

Apple iPhone 1.1.1

1.1.1

Apple iPhone 1.1.2

1.1.2

Apple ipod touch 1.1

1.1

Apple ipod touch 1.1.1

1.1.1

Apple ipod touch 1.1.2

1.1.2

References

APPLE-SA-2008-09-09

Patch, Vendor Advisory

APPLE-SA-2008-09-12

Patch, Vendor Advisory

APPLE-SA-2009-06-08-1

Patch, Vendor Advisory

SUSE-SR:2008:019

31823

Vendor Advisory

31900

Vendor Advisory

32099

Vendor Advisory

32860

35379

Vendor Advisory

http://support.apple.com/kb/HT3026

Patch, Vendor Advisory

http://support.apple.com/kb/HT3129

Patch, Vendor Advisory

http://support.apple.com/kb/HT3613

Patch, Vendor Advisory

31092

Patch

1020847

USN-676-1

ADV-2008-2525

Vendor Advisory

ADV-2008-2558

Vendor Advisory

ADV-2009-1522

Patch, Vendor Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.