Unscored severity · published Jul 14, 2008
CVE-2008-1590
JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute…
–
CVSS
2.8%
EPSS
No
On KEV
Description
JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger memory corruption, a different vulnerability than CVE-2008-2317.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JA
Javascriptcore · Webkit
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1590
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1590
lists.apple.com
http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html
secunia.com
http://secunia.com/advisories/31074
www.securityfocus.com
http://www.securityfocus.com/bid/30186
www.vupen.com
http://www.vupen.com/english/advisories/2008/2094/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/43738