Vulnerability Description
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL.
CVSS Score
4.3
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Iphone | 1.0 |
| Apple | Ipod Touch | 1.1 |
| Apple | Iphone Os | 1.0.1 |
| Apple | Safari | All versions |
Related Weaknesses (CWE)
References
- http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
- http://secunia.com/advisories/31074
- http://secunia.com/advisories/35379
- http://support.apple.com/kb/HT3613
- http://www.securityfocus.com/bid/30186
- http://www.vupen.com/english/advisories/2008/2094/references
- http://www.vupen.com/english/advisories/2009/1522
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43732
- http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
- http://secunia.com/advisories/31074
- http://secunia.com/advisories/35379
- http://support.apple.com/kb/HT3613
- http://www.securityfocus.com/bid/30186
FAQ
What is CVE-2008-1588?
CVE-2008-1588 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL.
How severe is CVE-2008-1588?
CVE-2008-1588 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-1588?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Iphone, Apple Ipod Touch, Apple Iphone Os, Apple Safari.