CVE

Id
34067  
CVE No.
CVE-2008-3950  
Status
Candidate  
Description
Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service (browser crash) via a JavaScript alert call with an argument that lacks breakable characters and has a length that is a multiple of the memory page size, leading to an out-of-bounds read.  
Phase
Assigned (20080905)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
372202 34067 CVE-2008-3950 BUGTRAQ:20080912 CORE-2008-0126: iPhone Safari JavaScript alert Denial of Service  View
372203 34067 CVE-2008-3950 URL:http://www.securityfocus.com/archive/1/archive/1/496321/100/0/threaded  View
372204 34067 CVE-2008-3950 MISC:http://www.coresecurity.com/content/iphone-safari-javascript-alert-denial-of-service  View
372205 34067 CVE-2008-3950 BID:31061  View
372206 34067 CVE-2008-3950 URL:http://www.securityfocus.com/bid/31061  View
372207 34067 CVE-2008-3950 SREASON:4264  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48105 JVNDB-2008-003415 AlstraSoft Forum Pay Per Post Exchange の index.php における SQL インジェクションの脆弱性 AlstraSoft Forum Pay Per Post Exchange の index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-3954 34067 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003415.html  View