CVE Vulnerabilities

CVE-2008-3632

Published: Sep 11, 2008 | Modified: Apr 09, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a web page with crafted Cascading Style Sheets (CSS) import statements.

Affected Software

NameVendorStart VersionEnd Version
IphoneApple1.1 (including)1.1 (including)
IphoneApple1.1.3 (including)1.1.3 (including)
IphoneApple1.1.4 (including)1.1.4 (including)
IphoneApple2.0 (including)2.0 (including)
IphoneApple2.0.1 (including)2.0.1 (including)
IphoneApple2.0.2 (including)2.0.2 (including)
Ipod_touchApple1.1 (including)1.1 (including)
Ipod_touchApple1.1.1 (including)1.1.1 (including)
Ipod_touchApple1.1.2 (including)1.1.2 (including)
Ipod_touchApple1.1.3 (including)1.1.3 (including)
Ipod_touchApple1.1.4 (including)1.1.4 (including)
Ipod_touchApple2.0 (including)2.0 (including)
Ipod_touchApple2.0.1 (including)2.0.1 (including)
Ipod_touchApple2.0.2 (including)2.0.2 (including)
Iphone_osApple1.1.1 (including)1.1.1 (including)
Iphone_osApple1.1.2 (including)1.1.2 (including)
WebkitUbuntugutsy*
WebkitUbuntuhardy*
WebkitUbuntuintrepid*

References