CVE-2008-0729: High severity apple iphone vulnerability

Published Feb 12, 2008

Updated

Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion and device crash) via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to CVE-2006-3677. NOTE: some of these details are obtained from third party information.

Affected Software

3 affected components

Apple iPhone=1.1.3

Apple iPhone OS=1.1.2

Apple Mobile Safari

Event History

Feb 12, 2008

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Data Sourced

09:00 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-0729?

CVE-2008-0729 is considered a denial of service vulnerability that can lead to memory exhaustion and device crashes.

How do I fix CVE-2008-0729?

To mitigate CVE-2008-0729, it is recommended to update to a version of iPhone OS that is not affected by this vulnerability.

Which devices are affected by CVE-2008-0729?

CVE-2008-0729 affects Apple iPhone devices running iPhone OS versions 1.1.2 and 1.1.3.

What type of attack does CVE-2008-0729 involve?

CVE-2008-0729 involves a remote denial of service attack using specific JavaScript code.

Is CVE-2008-0729 related to any other vulnerabilities?

CVE-2008-0729 may be related to CVE-2006-3677, as both involve similar issues with memory handling.