PT-2008-1163 · Apple+2 · Iphone+4

Dean Mcnamee · Published 2008-06-26 · Updated 2022-08-09 · CVE-2008-3632

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple iPod touch versions 1.1 through 2.0.2 Apple iPhone versions 1.0 through 2.0.2 Qt (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in WebKit and an error in resource management in the Qt cross-platform framework. This allows remote attackers to execute arbitrary code, cause a denial of service, or access and modify confidential data via a specially crafted web page. The vulnerability can be exploited through crafted Cascading Style Sheets (CSS) import statements or other specially created web pages.

Recommendations For Apple iPod touch versions 1.1 through 2.0.2, update to a version outside of this range to resolve the issue. For Apple iPhone versions 1.0 through 2.0.2, update to a version outside of this range to resolve the issue. For Qt, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2022-06880

CVE-2008-3632

Affected Products

Astra Linux

Qt

Webkit

Iphone

Ipod Touch

References · 25

• http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html · Vendor Advisory
• http://vupen.com/english/advisories/2008/2525 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1522 · Vendor Advisory
• http://securityfocus.com/bid/31092 · Patch
• http://vupen.com/english/advisories/2008/2558 · Vendor Advisory
• https://wiki.astralinux.ru/pages/viewpage.action?pageId=229283790 · Vendor Advisory
• http://ubuntu.com/usn/USN-676-1 · Vendor Advisory
• http://support.apple.com/kb/HT3026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3632 · Security Note
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-06880 · Security Note
• http://support.apple.com/kb/HT3613 · Vendor Advisory
• http://secunia.com/advisories/35379 · Vendor Advisory
• http://secunia.com/advisories/31823 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1110SE17 · Vendor Advisory