CVE-2008-1590: Medium severity apple iphone vulnerability

Published Jul 14, 2008

Updated

JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger memory corruption, a different vulnerability than CVE-2008-2317.

Affected Software

14 affected components

Apple iPhone=1.0

Apple iPhone=1.1.3

Apple iPhone=1.1.4

Apple iPhone=1.02

Apple iPod touch=1.1

Apple iPod touch=1.1.1

Apple iPod touch=1.1.2

Apple iPod touch=1.1.3

Apple iPod touch=1.1.4

iPhone OS=1.0.1

iPhone OS=1.0.2

iPhone OS=1.1.1

iPhone OS=1.1.2

WebKit JavaScriptCore

Event History

Jul 14, 2008

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

06:41 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-1590?

CVE-2008-1590 is considered a critical vulnerability due to its potential for remote code execution and application crashes.

How do I fix CVE-2008-1590?

To address CVE-2008-1590, update your device to the latest version of iPhone or iPod touch firmware that is not vulnerable.

What devices are affected by CVE-2008-1590?

CVE-2008-1590 affects Apple iPhone and iPod touch devices running versions before 2.0.

What type of attacks can exploit CVE-2008-1590?

CVE-2008-1590 can be exploited through remote attacks that trigger memory corruption.

Is CVE-2008-1590 still a risk in modern iOS versions?

CVE-2008-1590 is not a risk in modern iOS versions as it affects outdated firmware.