CVE-2008-4232

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-11-25 · updated 2026-06-16

Description

Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's content display to the boundaries of the IFRAME, which allows remote attackers to spoof a user interface via a crafted HTML document.

Affected products

Apple Iphone Os: 1.0, 1.0.1, 1.0.2, 1.1, 1.1.1, 1.1.2 (+7)
Apple Safari: all versions

References

http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html
http://osvdb.org/50029
http://secunia.com/advisories/32756
http://support.apple.com/kb/HT3318
http://www.securityfocus.com/bid/32394
http://www.securitytracker.com/id?1021272
http://www.vupen.com/english/advisories/2008/3232
http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html
http://osvdb.org/50029
http://secunia.com/advisories/32756
http://support.apple.com/kb/HT3318
http://www.securityfocus.com/bid/32394

Get alerted when CVE-2008-4232 or the next vulnerability affects your stack