Description
Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
References (13)
Core 13
Core References
Vendor Advisory x_refsource_misc
http://www.fortiguardcenter.com/advisory/FGA-2009-23.html
Mailing List vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1522
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/3232
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/35379
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/504211/100/0/threaded
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT3318
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1021272
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/50028
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/32394
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT3613
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/32756
Scores
EPSS
0.0585
EPSS Percentile
92.4%
Details
CWE
CWE-399
Status
published
Products (14)
apple/iphone_os
1.0
apple/iphone_os
1.0.1
apple/iphone_os
1.0.2
apple/iphone_os
1.1
apple/iphone_os
1.1.1
apple/iphone_os
1.1.2
apple/iphone_os
1.1.3
apple/iphone_os
1.1.4
apple/iphone_os
1.1.5
apple/iphone_os
2.0
... and 4 more
Published
Nov 25, 2008
Tracked Since
Feb 18, 2026