CVE-2008-3950: Medium severity apple iphone vulnerability
Off-by-one error in the webdrawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service (browser crash) via a JavaScript alert call with an argument that lacks breakable characters and has a length that is a multiple of the memory page size, leading to an out-of-bounds read.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3950?
CVE-2008-3950 is classified as a denial of service vulnerability that can cause a browser crash.
How do I fix CVE-2008-3950?
To mitigate CVE-2008-3950, update your Apple iPhone or iPod touch to the latest available version that addresses this vulnerability.
Which devices are affected by CVE-2008-3950?
CVE-2008-3950 affects Apple iPhone versions 1.1.4 and 2.0, as well as Apple iPod touch versions 1.1.4 and 2.0.
What type of attack does CVE-2008-3950 facilitate?
CVE-2008-3950 allows remote attackers to exploit a flaw that leads to a denial of service through JavaScript alert calls.
Can CVE-2008-3950 be exploited remotely?
Yes, CVE-2008-3950 can be exploited remotely, allowing attackers to crash the affected browser.