CVE-2008-3632

EUVD-2008-3618
Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a web page with crafted Cascading Style Sheets (CSS) import statements.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
Affected Products (NVD)
VendorProductVersion
appleiphone
1.1
appleiphone
1.1.3
appleiphone
1.1.4
appleiphone
2.0
appleiphone
2.0.1
appleiphone
2.0.2
appleipod_touch
1.1
appleipod_touch
1.1.1
appleipod_touch
1.1.2
appleipod_touch
1.1.3
appleipod_touch
1.1.4
appleipod_touch
2.0
appleipod_touch
2.0.1
appleipod_touch
2.0.2
appleiphone_os
1.1.1
appleiphone_os
1.1.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
qt4-x11
dapper
not-affected
feisty
not-affected
gutsy
not-affected
hardy
not-affected
intrepid
not-affected
jaunty
not-affected
karmic
not-affected
lucid
not-affected
maverick
not-affected
natty
not-affected
webkit
dapper
dne
feisty
dne
gutsy
ignored
hardy
ignored
intrepid
Fixed 1.0.1-2ubuntu0.1
released
jaunty
not-affected
karmic
not-affected
lucid
not-affected
maverick
not-affected
natty
not-affected
Common Weakness Enumeration
References