CVE-2008-0035

Unspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1.1 through 1.1.2, and Mac OS X 10.5 through 10.5.1, allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted URL that triggers memory corruption in Safari.

• CWE-399

• http://docs.info.apple.com/article.html?artnum=307302
• http://docs.info.apple.com/article.html?artnum=307430
• http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html
• http://lists.apple.com/archives/security-announce/2008/Jan/msg00000.html
• http://secunia.com/advisories/28497Vendor Advisory
• http://secunia.com/advisories/28891Vendor Advisory
• http://www.securityfocus.com/bid/27296
• http://www.securitytracker.com/id?1019220
• http://www.us-cert.gov/cas/techalerts/TA08-043B.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2008/0147Vendor Advisory
• http://www.vupen.com/english/advisories/2008/0495/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39700
• http://docs.info.apple.com/article.html?artnum=307302
• http://docs.info.apple.com/article.html?artnum=307430
• http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html
• http://lists.apple.com/archives/security-announce/2008/Jan/msg00000.html
• http://secunia.com/advisories/28497Vendor Advisory
• http://secunia.com/advisories/28891Vendor Advisory
• http://www.securityfocus.com/bid/27296
• http://www.securitytracker.com/id?1019220
• http://www.us-cert.gov/cas/techalerts/TA08-043B.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2008/0147Vendor Advisory
• http://www.vupen.com/english/advisories/2008/0495/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39700

Published

Jan 16, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0029Cisco Application Velocity System (AVS) before 5.1.0 is inst…
• CVE-2008-0030Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2008-0031Unspecified vulnerability in Apple QuickTime before 7.4 allo…
• CVE-2008-0032Apple QuickTime before 7.4 allows remote attackers to execut…
• CVE-2008-0033Unspecified vulnerability in Apple QuickTime before 7.4 allo…
• CVE-2008-0034Unspecified vulnerability in Passcode Lock in Apple iPhone 1…
• CVE-2008-0036Buffer overflow in Apple QuickTime before 7.4 allows remote …
• CVE-2008-0037X11 in Apple Mac OS X 10.5 through 10.5.1 does not properly …
• CVE-2008-0038Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows…
• CVE-2008-0039Unspecified vulnerability in Mail in Apple Mac OS X 10.4.11 …
• CVE-2008-0040Unspecified vulnerability in NFS in Apple Mac OS X 10.5 thro…
• CVE-2008-0041Parental Controls in Apple Mac OS X 10.5 through 10.5.1 cont…