CVE-2008-3632

Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a web page with crafted Cascading Style Sheets (CSS) import statements.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
VendorProductVersion
appleiphone
1.1
appleiphone
1.1.3
appleiphone
1.1.4
appleiphone
2.0
appleiphone
2.0.1
appleiphone
2.0.2
appleipod_touch
1.1
appleipod_touch
1.1.1
appleipod_touch
1.1.2
appleipod_touch
1.1.3
appleipod_touch
1.1.4
appleipod_touch
2.0
appleipod_touch
2.0.1
appleipod_touch
2.0.2
appleiphone_os
1.1.1
appleiphone_os
1.1.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
qt4-x11
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
not-affected
jaunty
not-affected
intrepid
not-affected
hardy
not-affected
gutsy
not-affected
feisty
not-affected
dapper
not-affected
webkit
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
not-affected
jaunty
not-affected
intrepid
Fixed 1.0.1-2ubuntu0.1
released
hardy
ignored
gutsy
ignored
feisty
dne
dapper
dne
Common Weakness Enumeration
References