CVE-2008-4231

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-11-25 · updated 2026-06-16
Weakness: CWE-399

Description

Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

Affected products

Apple Iphone Os: 1.0, 1.0.1, 1.0.2, 1.1, 1.1.1, 1.1.2 (+7)
Apple Safari: all versions

References

http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
http://osvdb.org/50028
http://secunia.com/advisories/32756
http://secunia.com/advisories/35379
http://support.apple.com/kb/HT3318
http://support.apple.com/kb/HT3613
http://www.fortiguardcenter.com/advisory/FGA-2009-23.html
http://www.securityfocus.com/archive/1/504211/100/0/threaded
http://www.securityfocus.com/bid/32394
http://www.securitytracker.com/id?1021272
http://www.vupen.com/english/advisories/2008/3232

Get alerted when CVE-2008-4231 or the next vulnerability affects your stack