CVE-2008-1008: XSS
Published Mar 19, 2008
·Updated
Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via the document.domain property.
Affected Software
16 affected components
Safari=1.3.2
Safari=3.0.4
Safari=2.0.2
Safari=3.0.1
Safari=3.0.2
Safari=1.0
Safari=1.3
Safari=3.0.3
Safari=2.0
Safari=0.8
Safari=2.0.4
Safari=1.1
Safari=1.3.1
Safari=1.2
Safari=3.0
Safari=0.9
Remediation
Event History
Mar 19, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1008?
CVE-2008-1008 has been rated as a moderate severity vulnerability that could allow for cross-site scripting attacks.
2
How do I fix CVE-2008-1008?
To fix CVE-2008-1008, upgrade to a version of Apple Safari that is 3.1 or later.
3
What types of attacks could CVE-2008-1008 facilitate?
CVE-2008-1008 could facilitate cross-site scripting attacks, allowing attackers to inject arbitrary web scripts or HTML.
4
Which versions of Apple Safari are affected by CVE-2008-1008?
CVE-2008-1008 affects several versions of Apple Safari, including 1.0 to 3.0.4.
5
Is there a workaround for CVE-2008-1008?
Currently, the best approach to mitigate CVE-2008-1008 is to update to the latest version of Apple Safari.