9.3

CVE-2008-3632

Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a web page with crafted Cascading Style Sheets (CSS) import statements.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Iphone Version1.1
Apple ≫ Iphone Version1.1.3
Apple ≫ Iphone Version1.1.4
Apple ≫ Iphone Version2.0
Apple ≫ Iphone Version2.0.1
Apple ≫ Iphone Version2.0.2
Apple ≫ Ipod Touch Version1.1
Apple ≫ Ipod Touch Version1.1.1
Apple ≫ Ipod Touch Version1.1.2
Apple ≫ Ipod Touch Version1.1.3
Apple ≫ Ipod Touch Version1.1.4
Apple ≫ Ipod Touch Version2.0
Apple ≫ Ipod Touch Version2.0.1
Apple ≫ Ipod Touch Version2.0.2
Apple ≫ iPhone OS Version1.1.1
Apple ≫ iPhone OS Version1.1.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 10.57% 0.929
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
http://support.apple.com/kb/HT3613
Patch
Vendor Advisory
http://support.apple.com/kb/HT3026
Patch
Vendor Advisory
http://support.apple.com/kb/HT3129
Patch
Vendor Advisory