CVE-2008-2303 Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors i...
HighCVSS 10.0
EPSS 13.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability than CVE-2008-2307.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple Safari | All versions | No fix listed |
References
- APPLE-SA-2008-11-13 vendor-advisory
- APPLE-SA-2008-07-11 vendor-advisory
- 31074 third-party-advisory
- 32706 third-party-advisory
- support.apple.com
- 30186 vdb-entry
- ADV-2008-2094 vdb-entry
- ipod-iphone-javascript-code-execution(43736) vdb-entry