CVE-2008-1589 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-1589
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1589

Description: Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/43734 SAID Secunia Advisory: SA31074 JVNDB http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000039.html JVN http://jvn.jp/en/jp/JVN88676089/index.html BID 30186 APPLE http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html

Return to the previous page.