← Database

CVE-2008-2303

CRITICAL CVSS: 10.0 Published: 2008-07-14 Modified: 2026-06-16

Description

Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability than CVE-2008-2307.

Affected Platforms

Apple Iphone OsApple SafariApple IphoneApple Ipod Touch

Weakness Type

CWE-189

References