GCVE - cpe:2.3:h:apple:ipod_touch:1.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:apple:ipod_touch:1.1.1:*:*:*:*:*:*:*

part: h version: 1.1.1 update: *

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Ipod Touch (`d9609918-040b-5935-8e3f-d061724027b5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-3632`	vulnerable	2026-06-08 04:50:35.706169	Details available Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a web page with crafted Cascading Style Sheets (CSS) import statements. Published: 2008-09-10T16:00:00.000Z Updated: 2024-08-07T09:45:19.009Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32860 http://www.vupen.com/english/advisories/2008/2525 http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html http://www.vupen.com/english/advisories/2009/1522 http://www.ubuntu.com/usn/USN-676-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2317`	not_vulnerable	2026-06-08 04:50:23.490301	Details available WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via a reference to the ownerNode property of a copied CSSStyleSheet object of a STYLE element, as originally demonstrated on Apple iPhone before 2.0 and iPod touch before 2.0, a different vulnerability than CVE-2008-1590. Published: 2008-07-14T18:00:00.000Z Updated: 2024-08-07T08:58:02.593Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/494777/100/0/threaded http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html http://www.zerodayinitiative.com/advisories/ZDI-08-045/ http://www.securityfocus.com/bid/30186 http://secunia.com/advisories/32706	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2303`	not_vulnerable	2026-06-08 04:50:23.447104	Details available Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability than CVE-2008-2307. Published: 2008-07-14T18:00:00.000Z Updated: 2024-08-07T08:58:01.772Z Open on db.gcve.eu Reference links http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html https://exchange.xforce.ibmcloud.com/vulnerabilities/43736 http://www.securityfocus.com/bid/30186 http://secunia.com/advisories/32706 http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1590`	not_vulnerable	2026-06-08 04:50:21.106329	Details available JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger memory corruption, a different vulnerability than CVE-2008-2317. Published: 2008-07-14T18:00:00.000Z Updated: 2024-08-07T08:24:42.862Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/30186 https://exchange.xforce.ibmcloud.com/vulnerabilities/43738 http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html http://www.vupen.com/english/advisories/2008/2094/references http://secunia.com/advisories/31074	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1589`	not_vulnerable	2026-06-08 04:50:21.105654	Details available Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites. Published: 2008-07-14T18:00:00.000Z Updated: 2024-08-07T08:24:42.907Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/43734 http://www.securityfocus.com/bid/30186 http://jvn.jp/en/jp/JVN88676089/index.html http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html http://www.vupen.com/english/advisories/2008/2094/references	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1588`	not_vulnerable	2026-06-08 04:50:21.103163	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0035`	not_vulnerable	2026-06-08 04:50:09.995302	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5858`	not_vulnerable	2026-06-08 04:50:07.188169	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5450`	not_vulnerable	2026-06-08 04:50:06.058518	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.