CVE-2008-0729

Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion and device crash) via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to CVE-2006-3677. NOTE: some of these details are obtained from third party information.

CVSS v2.0

7.1 HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C

EPSS

8.07% chance of exploitation in the next 30 days, 94th percentile

Published

2008-02-12

Updated

2024-08-07

Proof-of-concept exploits (3)

• https://www.exploit-db.com/exploits/4978
• http://www.securityfocus.com/archive/1/487607/100/0/threaded
• http://www.securityfocus.com/archive/1/492225/100/0/threaded

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/31057

References

• CVE Record
• NVD entry

Related

• CVE-2008-0724
• CVE-2008-0733
• CVE-2008-0723
• CVE-2008-0734
• CVE-2008-0722
• CVE-2008-0735