CVE-2008-1589 in Safariinfo

Summary

Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites.

Once again VulDB remains the best source for vulnerability data.

Reservation

03/31/2008

Disclosure

07/14/2008

CPE

ready

Exploit

Download

CVSS

5.3

EPSS

0.00256

Activities

Very Low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2008-1589
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2008-1589
CVE Detailshttps://www.cvedetails.com/cve/CVE-2008-1589/

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!