Vulnerability Description
JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger memory corruption, a different vulnerability than CVE-2008-2317.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Iphone | 1.0 |
| Apple | Ipod Touch | 1.1 |
| Apple | Iphone Os | 1.0.1 |
| Webkit | Javascriptcore | All versions |
Related Weaknesses (CWE)
References
- http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html
- http://secunia.com/advisories/31074
- http://www.securityfocus.com/bid/30186
- http://www.vupen.com/english/advisories/2008/2094/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43738
- http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html
- http://secunia.com/advisories/31074
- http://www.securityfocus.com/bid/30186
- http://www.vupen.com/english/advisories/2008/2094/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43738
FAQ
What is CVE-2008-1590?
CVE-2008-1590 is a vulnerability with a CVSS score of 6.8 (MEDIUM). JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a d...
How severe is CVE-2008-1590?
CVE-2008-1590 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-1590?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Iphone, Apple Ipod Touch, Apple Iphone Os, Webkit Javascriptcore.