New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2008-2303

NVDCIRCLENISA

EUVD-2008-2299 · Published Jul 14, 2008

Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability than CVE-2008-2307.

Technologies

Apple Iphone OsApple SafariApple IphoneApple Ipod Touch

Weaknesses

CWE-189

CVSS scores

  • v2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot