CVE-2008-1590
Last modified
CVE-2008-1590 is a vulnerability of currently unknown severity. JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger memory corruption, a different vulnerability than CVE-2008-2317.. EPSS estimates a 2.84% chance of exploitation in the next 30 days.
Description
JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger memory corruption, a different vulnerability than CVE-2008-2317.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Webkit | Javascriptcore | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-1590?
How severe is CVE-2008-1590?
How do I fix CVE-2008-1590?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-1583Heap-based buffer overflow in Apple QuickTime before 7.5 all…
- CVE-2008-1584Stack-based buffer overflow in Indeo.qtx in Apple QuickTime …
- CVE-2008-1585Apple QuickTime before 7.5 uses the url.dll!FileProtocolHand…
- CVE-2008-1586ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for…
- CVE-2008-1588Safari on Apple iPhone before 2.0 and iPod touch before 2.0 …
- CVE-2008-1589Safari on Apple iPhone before 2.0 and iPod touch before 2.0 …
- CVE-2008-1591The pnVarPrepForStore function in PostNuke 0.764 and earlier…
- CVE-2008-1592MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP…
- CVE-2008-1593The checkpoint and restart feature in the kernel in IBM AIX …
- CVE-2008-1594The kernel in IBM AIX 5.2 and 5.3 does not properly handle r…
- CVE-2008-1595The proc filesystem in the kernel in IBM AIX 5.2 and 5.3 doe…
- CVE-2008-1596Trusted Execution in IBM AIX 6.1 uses an incorrect pathname …
Are you affected by CVE-2008-1590?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST