Unscored severity · published Sep 11, 2008
CVE-2008-3631
Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IT
Ipod Touch · Apple
2.0; 2.0.1; 2.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3631
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3631
lists.apple.com
http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html
lists.apple.com
http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html
secunia.com
http://secunia.com/advisories/31823
secunia.com
http://secunia.com/advisories/31900
support.apple.com
http://support.apple.com/kb/HT3026
support.apple.com
http://support.apple.com/kb/HT3129
More from Ipod Touch
–
CVE-2009-2206
Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote…
–
CVE-2009-1724
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms,…
–
CVE-2009-1725
WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt…
–
CVE-2009-1683
The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device reset) via…
–
CVE-2009-1680
Safari in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly clear the search history when it is cleared from the Settings…