Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-3631

Опубликовано: 11 сент. 2008
Источник: nvd
CVSS2: 7.1
EPSS Низкий

Описание

Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:apple:ipod_touch:2.0:*:*:*:*:*:*:*
cpe:2.3:h:apple:ipod_touch:2.0.1:*:*:*:*:*:*:*
cpe:2.3:h:apple:ipod_touch:2.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 75%
0.00856
Низкий

7.1 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

github
почти 4 года назад

Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application.

EPSS

Процентиль: 75%
0.00856
Низкий

7.1 High

CVSS2

Дефекты

CWE-264