5

CVE-2008-3950

Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service (browser crash) via a JavaScript alert call with an argument that lacks breakable characters and has a length that is a multiple of the memory page size, leading to an out-of-bounds read.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Iphone Version1.1.4
Apple ≫ Iphone Version2.0
Apple ≫ Ipod Touch Version1.1.4
Apple ≫ Ipod Touch Version2.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.08% 0.934
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://securityreason.com/securityalert/4264
http://www.coresecurity.com/content/iphone-safari-javascript-alert-denial-of-service
Patch
http://www.securityfocus.com/archive/1/496321/100/0/threaded
http://www.securityfocus.com/bid/31061
Patch