CVE-2008-3631 Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-p...
HighCVSS 7.1
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple ipod touch | = 2.0 | No fix listed |
| apple ipod touch | = 2.0.1 | No fix listed |
| apple ipod touch | = 2.0.2 | No fix listed |
References
- APPLE-SA-2008-09-09 vendor-advisory
- APPLE-SA-2008-09-12 vendor-advisory
- 31823 third-party-advisory
- 31900 third-party-advisory
- support.apple.com
- support.apple.com
- 31092 vdb-entry
- 1020846 vdb-entry
- ADV-2008-2525 vdb-entry
- ADV-2008-2558 vdb-entry