CVE-2008-0035: Medium severity apple ios and macos vulnerability

Published Jan 16, 2008

Updated

Unspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1.1 through 1.1.2, and Mac OS X 10.5 through 10.5.1, allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted URL that triggers memory corruption in Safari.

Affected Software

12 affected components

Apple iOS and macOS=10.5

Apple iOS and macOS=10.5.1

Apple iPhone=1.0

Apple iPhone=1.02

Apple iPod touch=1.1

Apple iPod touch=1.1.1

Apple iPod touch=1.1.2

Apple iPhone OS=1.0.1

Apple iPhone OS=1.0.2

Apple iPhone OS=1.1.1

Apple iPhone OS=1.1.2

Apple Safari

Event History

Jan 16, 2008

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

02:00 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-0035?

CVE-2008-0035 has a moderate severity as it can lead to denial of service or arbitrary code execution.

How do I fix CVE-2008-0035?

To fix CVE-2008-0035, users should ensure they are using updated versions of affected Apple software.

What systems are affected by CVE-2008-0035?

CVE-2008-0035 affects Apple iPhone OS versions 1.0 through 1.1.2, iPod touch up to 1.1.2, and Mac OS X 10.5 through 10.5.1.

Can CVE-2008-0035 be exploited remotely?

Yes, CVE-2008-0035 can be exploited by remote attackers through crafted URLs.

What kind of vulnerabilities does CVE-2008-0035 involve?

CVE-2008-0035 involves memory corruption vulnerabilities that may lead to application termination.