CVE-2008-2317
Publicada em · Atualizada em
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 7.7%
probabilidade de exploração
7.7%top 5% das CVEs
exploração observada
nãonenhuma fonte reporta
WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via a reference to the ownerNode property of a copied CSSStyleSheet object of a STYLE element, as originally demonstrated on Apple iPhone before 2.0 and iPod touch before 2.0, a different vulnerability than CVE-2008-1590.
Produtos afetados
n/a · n/aReferências
http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.htmlhttp://lists.apple.com/archives/security-announce//2008/Nov/msg00001.htmlhttp://secunia.com/advisories/31074http://secunia.com/advisories/32706https://exchange.xforce.ibmcloud.com/vulnerabilities/43737http://support.apple.com/kb/HT3298http://www.securityfocus.com/archive/1/494777/100/0/threadedhttp://www.securityfocus.com/bid/30186http://www.vupen.com/english/advisories/2008/2094/referenceshttp://www.zerodayinitiative.com/advisories/ZDI-08-045/