Apple iPhone Safari Bugs Let Remote Users Spoof the Interface and Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1021272 |
|
SecurityTracker URL: http://securitytracker.com/id/1021272
|
|
CVE Reference:
CVE-2008-4231, CVE-2008-4232
(Links to External Site)
|
Date: Nov 21 2008
|
Impact:
Execution of arbitrary code via network, Modification of system information, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 1.0 - 2.1
|
Description:
Two vulnerabilities were reported in Apple iPhone. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can spoof the user interface.
A remote user can create HTML with specially crafted HTML table elements that, when loaded by the target user, will trigger a memory corruption error and execute arbitrary code on the target system [CVE-2008-4231].
Haifei Li of Fortinet's FortiGuard Global Security Research Team reported this vulnerability.
A remote user can create HTML with a specially crafted iframe element that, when loaded by the target user, will display content outside the boundaries of the iframe [CVE-2008-4232]. This can be exploited to spoof the user interface.
John Resig of Mozilla Corporation reported this vulnerability.
|
Impact:
A remote user can create a file that, when loaded by the target user, will execute arbitrary code on the target device or spoof the user interface.
|
Solution:
The vendor has issued a fixed version (2.2).
The vendor's advisory is available at:
http://support.apple.com/kb/HT3318
|
Vendor URL: support.apple.com/kb/HT3318 (Links to External Site)
|
Cause:
Access control error
|
Underlying OS:
|
|
Message History:
None.
|
Source Message Contents
|
Date: Fri, 21 Nov 2008 02:35:25 -0500
Subject: Apple iPhone
|
Safari
CVE-ID: CVE-2008-4231
Available for: iPhone OS 1.0 through 2.1,
iPhone OS for iPod touch 1.1 through 2.1
Impact: Visiting a maliciously crafted website may lead to an
unexpected application termination or arbitrary code execution
Description: A memory corruption issue exists in the handling of
HTML table elements. Visiting a maliciously crafted website may lead
to an unexpected application termination or arbitrary code execution.
This update addresses the issue through improved handling of HTML
table elements. Credit to Haifei Li of Fortinet's FortiGuard Global
Security Research Team for reporting this issue.
Safari
CVE-ID: CVE-2008-4232
Available for: iPhone OS 1.0 through 2.1,
iPhone OS for iPod touch 1.1 through 2.1
Impact: Websites with embedded iframe elements may be vulnerable to
user interface spoofing
Description: Safari allows an iframe element to display content
outside its boundaries, which may lead to user interface spoofing.
This update addresses the issue by not allowing iframe elements to
display content outside their boundaries. This issue does not affect
systems prior to iPhone OS 2.0 or iPhone OS for iPod touch 2.0.
Credit to John Resig of Mozilla Corporation for reporting this issue.
|
|
