Approved changes feed: RSS · Atom
cpe:2.3:h:apple:iphone:1.1.4:*:*:*:*:*:*:*
part: h version: 1.1.4 update: *
| Vendor | Apple (c2b419d0-9f0f-51c1-88dc-2e204a98e1c7) |
|---|---|
| Product | Iphone (fe3ad902-e43b-5982-92da-13696dc4f9e4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-3950 |
vulnerable | 2026-06-08 04:50:37.260618 |
Details available
Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service (browser crash) via a JavaScript alert call with an argument that lacks breakable characters and has a length that is a multiple of the memory page size, leading to an out-of-bounds read.
Published: 2008-09-16T23:00:00.000Z
Updated: 2024-08-07T10:00:42.618Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3632 |
vulnerable | 2026-06-08 04:50:35.703543 |
Details available
Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a web page with crafted Cascading Style Sheets (CSS) import statements.
Published: 2008-09-10T16:00:00.000Z
Updated: 2024-08-07T09:45:19.009Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2303 |
not_vulnerable | 2026-06-08 04:50:23.447043 |
Details available
Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability than CVE-2008-2307.
Published: 2008-07-14T18:00:00.000Z
Updated: 2024-08-07T08:58:01.772Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1590 |
not_vulnerable | 2026-06-08 04:50:21.106280 |
Details available
JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger memory corruption, a different vulnerability than CVE-2008-2317.
Published: 2008-07-14T18:00:00.000Z
Updated: 2024-08-07T08:24:42.862Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1589 |
not_vulnerable | 2026-06-08 04:50:21.105599 |
Details available
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites.
Published: 2008-07-14T18:00:00.000Z
Updated: 2024-08-07T08:24:42.907Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1588 |
not_vulnerable | 2026-06-08 04:50:21.101520 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.