Critical severity9.8NVD Advisory· Published Sep 11, 2008· Updated Jun 16, 2026

CVE-2008-3612

Description

The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: >=2.0.0,<=2.0.2
Apple Inc./iPhonellm-fuzzy
Range: 2.0 - 2.0.2
Apple Inc./Ipod Touchllm-fuzzy
Range: 2.0 - 2.0.2

Patches

Vulnerability mechanics

References

lists.apple.com/archives/security-announce//2008/Sep/msg00003.htmlnvdMailing ListVendor Advisory
lists.apple.com/archives/security-announce//2008/Sep/msg00004.htmlnvdMailing ListVendor Advisory
secunia.com/advisories/31823nvdBroken LinkVendor Advisory
secunia.com/advisories/31900nvdBroken LinkVendor Advisory
support.apple.com/kb/HT3026nvdVendor Advisory
support.apple.com/kb/HT3129nvdVendor Advisory
www.securityfocus.com/bid/31092nvdBroken LinkThird Party AdvisoryVDB Entry
www.securitytracker.com/idnvdBroken LinkThird Party AdvisoryVDB Entry
www.vupen.com/english/advisories/2008/2525nvdBroken LinkVendor Advisory
www.vupen.com/english/advisories/2008/2558nvdBroken LinkVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000