CVEvulnerability
CVE-2008-3632
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-09-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a web page with crafted Cascading Style Sheets (CSS) import statements.
Affected configurations
• apple iphone 1.1
• apple iphone 1.1.3
• apple iphone 1.1.4
• apple iphone 2.0
• apple iphone 2.0.1
• apple iphone 2.0.2
• apple ipod touch 1.1
• apple ipod touch 1.1.1
• apple ipod touch 1.1.2
• apple ipod touch 1.1.3
• apple ipod touch 1.1.4
• apple ipod touch 2.0
• apple ipod touch 2.0.1
• apple ipod touch 2.0.2
• apple iphone os 1.1.1
• apple iphone os 1.1.2
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html Patch, Vendor Advisory
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html Patch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html lists.opensuse.org
- http://secunia.com/advisories/31823 Vendor Advisory
- http://secunia.com/advisories/31900 Vendor Advisory
- http://secunia.com/advisories/32099 Vendor Advisory
- http://secunia.com/advisories/32860 secunia.com
- http://secunia.com/advisories/35379 Vendor Advisory
- http://support.apple.com/kb/HT3026 Patch, Vendor Advisory
- http://support.apple.com/kb/HT3129 Patch, Vendor Advisory
- http://support.apple.com/kb/HT3613 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/31092 Patch
- http://www.securitytracker.com/id?1020847 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-676-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2008/2525 Vendor Advisory
- http://www.vupen.com/english/advisories/2008/2558 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1522 Patch, Vendor Advisory
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html Patch, Vendor Advisory
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html Patch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html lists.opensuse.org
- http://secunia.com/advisories/31823 Vendor Advisory
- http://secunia.com/advisories/31900 Vendor Advisory
- http://secunia.com/advisories/32099 Vendor Advisory
- http://secunia.com/advisories/32860 secunia.com
- http://secunia.com/advisories/35379 Vendor Advisory
- http://support.apple.com/kb/HT3026 Patch, Vendor Advisory
- http://support.apple.com/kb/HT3129 Patch, Vendor Advisory
- http://support.apple.com/kb/HT3613 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/31092 Patch
- http://www.securitytracker.com/id?1020847 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-676-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2008/2525 Vendor Advisory
- http://www.vupen.com/english/advisories/2008/2558 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1522 Patch, Vendor Advisory