CVEvulnerability

CVE-2008-4232

5.0 MEDIUM Published 2008-11-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-11-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's content display to the boundaries of the IFRAME, which allows remote attackers to spoof a user interface via a crafted HTML document.

Affected configurations

• apple safari • apple iphone os 1.0 • apple iphone os 1.0.1 • apple iphone os 1.0.2 • apple iphone os 1.1 • apple iphone os 1.1.1 • apple iphone os 1.1.2 • apple iphone os 1.1.3 • apple iphone os 1.1.4 • apple iphone os 1.1.5 • apple iphone os 2.0 • apple iphone os 2.0.1 • apple iphone os 2.0.2 • apple iphone os 2.1

References