CVE-2008-4231 Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to execute arbitrary code or cause a....
HighCVSS 9.3
EPSS 5.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple Safari | All versions | No fix listed |
| apple iphone os | = 1.0 | No fix listed |
| apple iphone os | = 1.0.1 | No fix listed |
| apple iphone os | = 1.0.2 | No fix listed |
| apple iphone os | = 1.1 | No fix listed |
| apple iphone os | = 1.1.1 | No fix listed |
| apple iphone os | = 1.1.2 | No fix listed |
| apple iphone os | = 1.1.3 | No fix listed |
| apple iphone os | = 1.1.4 | No fix listed |
| apple iphone os | = 1.1.5 | No fix listed |
| apple iphone os | = 2.0 | No fix listed |
| apple iphone os | = 2.0.1 | No fix listed |
| apple iphone os | = 2.0.2 | No fix listed |
| apple iphone os | = 2.1 | No fix listed |
References
- APPLE-SA-2008-11-20 vendor-advisory
- APPLE-SA-2009-06-08-1 vendor-advisory
- 50028 vdb-entry
- 32756 third-party-advisory
- 35379 third-party-advisory
- support.apple.com vendor-advisory
- support.apple.com
- www.fortiguardcenter.com
- 20090610 FortiGuard Advisory: Apple Safari Remote Memory Corruption Vulnerability mailing-list
- 32394 vdb-entry
- 1021272 vdb-entry
- ADV-2008-3232 vdb-entry
- ADV-2009-1522 vdb-entry