VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 25, 2008· Updated Jun 16, 2026

CVE-2008-4233

CVE-2008-4233

Description

Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not isolate the call-approval dialog from the process of launching new applications, which allows remote attackers to make arbitrary phone calls via a crafted HTML document.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • Apple Inc./Safari2 versions
    cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
    • (no CPE)range: 1.0 - 2.1
  • Apple Inc./Iphone OS14 versions
    cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.0 - 2.1
  • Apple Inc./iPhone OS for iPod touchllm-fuzzy
    Range: 1.1 - 2.1

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.