Unrated severityNVD Advisory· Published Apr 17, 2008· Updated Jun 16, 2026
CVE-2008-1025
CVE-2008-1025
Description
Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a colon in the hostname portion.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
20cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*+ 17 more
- cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*
- (no CPE)range: <3.1.1
cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*
- (no CPE)range: <3.1.1
Patches
Vulnerability mechanics
References
11- www.kb.cert.org/vuls/id/705529nvdUS Government Resource
- lists.apple.com/archives/security-announce/2008//Jul/msg00001.htmlnvd
- lists.apple.com/archives/security-announce/2008/Apr/msg00001.htmlnvd
- secunia.com/advisories/29846nvd
- secunia.com/advisories/31074nvd
- support.apple.com/kb/HT1467nvd
- www.securityfocus.com/bid/28814nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2008/1250/referencesnvd
- www.vupen.com/english/advisories/2008/2094/referencesnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/41862nvd
News mentions
0No linked articles in our index yet.