9.3

CVE-2008-4231

Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AppleSafari
   AppleIpod Touch
   AppleiPhone OS
AppleiPhone OS Version1.0
   AppleIpod Touch
   AppleiPhone OS
AppleiPhone OS Version1.0.1
   AppleIpod Touch
   AppleiPhone OS
AppleiPhone OS Version1.0.2
   AppleIpod Touch
   AppleiPhone OS
AppleiPhone OS Version1.1
   AppleIpod Touch
   AppleiPhone OS
AppleiPhone OS Version1.1.1
   AppleIpod Touch
   AppleiPhone OS
AppleiPhone OS Version1.1.2
   AppleIpod Touch
   AppleiPhone OS
AppleiPhone OS Version1.1.3
   AppleIpod Touch
   AppleiPhone OS
AppleiPhone OS Version1.1.4
   AppleIpod Touch
   AppleiPhone OS
AppleiPhone OS Version1.1.5
   AppleIpod Touch
   AppleiPhone OS
AppleiPhone OS Version2.0
   AppleIpod Touch
   AppleiPhone OS
AppleiPhone OS Version2.0.1
   AppleIpod Touch
   AppleiPhone OS
AppleiPhone OS Version2.0.2
   AppleIpod Touch
   AppleiPhone OS
AppleiPhone OS Version2.1
   AppleIpod Touch
   AppleiPhone OS
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.85% 0.922
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
http://secunia.com/advisories/35379
http://support.apple.com/kb/HT3613
http://www.vupen.com/english/advisories/2009/1522
http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html
Vendor Advisory
http://secunia.com/advisories/32756
http://support.apple.com/kb/HT3318
Vendor Advisory
http://www.vupen.com/english/advisories/2008/3232
http://www.securityfocus.com/bid/32394
http://osvdb.org/50028
http://www.fortiguardcenter.com/advisory/FGA-2009-23.html
http://www.securityfocus.com/archive/1/504211/100/0/threaded
http://www.securitytracker.com/id?1021272