Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-3632

Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a web page with crafted Cascading Style Sheets (CSS) import statements.

Published

2008-09-11T01:13:09.960

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-399

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Hardware	apple	iphone	1.1	Yes
Hardware	apple	iphone	1.1.3	Yes
Hardware	apple	iphone	1.1.4	Yes
Hardware	apple	iphone	2.0	Yes
Hardware	apple	iphone	2.0.1	Yes
Hardware	apple	iphone	2.0.2	Yes
Hardware	apple	ipod_touch	1.1	Yes
Hardware	apple	ipod_touch	1.1.1	Yes
Hardware	apple	ipod_touch	1.1.2	Yes
Hardware	apple	ipod_touch	1.1.3	Yes
Hardware	apple	ipod_touch	1.1.4	Yes
Hardware	apple	ipod_touch	2.0	Yes
Hardware	apple	ipod_touch	2.0.1	Yes
Hardware	apple	ipod_touch	2.0.2	Yes
Operating System	apple	iphone_os	1.1.1	Yes
Operating System	apple	iphone_os	1.1.2	Yes

References

http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html Patch, Vendor Advisory ([email protected])
http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html Patch, Vendor Advisory ([email protected])
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html Patch, Vendor Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html ([email protected])
http://secunia.com/advisories/31823 Vendor Advisory ([email protected])
http://secunia.com/advisories/31900 Vendor Advisory ([email protected])
http://secunia.com/advisories/32099 Vendor Advisory ([email protected])
http://secunia.com/advisories/32860 ([email protected])
http://secunia.com/advisories/35379 Vendor Advisory ([email protected])
http://support.apple.com/kb/HT3026 Patch, Vendor Advisory ([email protected])
http://support.apple.com/kb/HT3129 Patch, Vendor Advisory ([email protected])
http://support.apple.com/kb/HT3613 Patch, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/31092 Patch ([email protected])
http://www.securitytracker.com/id?1020847 ([email protected])
http://www.ubuntu.com/usn/USN-676-1 ([email protected])
http://www.vupen.com/english/advisories/2008/2525 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2008/2558 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2009/1522 Patch, Vendor Advisory ([email protected])
http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31823 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31900 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/32099 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/32860 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/35379 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT3026 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT3129 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT3613 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/31092 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1020847 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-676-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/2525 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/2558 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2009/1522 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)