9.3
CVE-2008-4231
- EPSS 5.85%
- Veröffentlicht 25.11.2008 23:30:00
- Zuletzt bearbeitet 16.06.2026 22:57:27
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 5.85% | 0.922 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
http://secunia.com/advisories/35379
http://support.apple.com/kb/HT3613
http://www.vupen.com/english/advisories/2009/1522
http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html
http://secunia.com/advisories/32756
http://support.apple.com/kb/HT3318
http://www.vupen.com/english/advisories/2008/3232
http://www.securityfocus.com/bid/32394
http://osvdb.org/50028
http://www.fortiguardcenter.com/advisory/FGA-2009-23.html
http://www.securityfocus.com/archive/1/504211/100/0/threaded
http://www.securitytracker.com/id?1021272