Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Informations
Name CVE-2008-1025 First vendor Publication 2008-04-17
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Cvss Base Score 4.3 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a colon in the hostname portion.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1025

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-79 Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 17
Application 1

Open Source Vulnerability Database (OSVDB)

Id Description
44468 Apple Safari WebKit URL Hostname XSS

Nessus® Vulnerability Scanner

Date Description
2008-04-18 Name : The remote host contains a web browser that is affected by several issues.
File : macosx_Safari3_1_1.nasl - Type : ACT_GATHER_INFO
2008-04-18 Name : The remote host contains a web browser that is affected by several issues.
File : safari_3_1_1.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html
http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html
http://secunia.com/advisories/29846
http://secunia.com/advisories/31074
http://support.apple.com/kb/HT1467
http://www.kb.cert.org/vuls/id/705529
http://www.securityfocus.com/bid/28814
http://www.securitytracker.com/id?1019869
http://www.vupen.com/english/advisories/2008/1250/references
http://www.vupen.com/english/advisories/2008/2094/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41862
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
Date Informations
2024-11-28 23:14:31
  • Multiple Updates
2024-11-28 12:15:01
  • Multiple Updates
2021-05-04 12:07:11
  • Multiple Updates
2021-04-22 01:07:36
  • Multiple Updates
2020-05-23 00:21:20
  • Multiple Updates
2017-08-08 09:23:53
  • Multiple Updates
2016-04-26 17:10:06
  • Multiple Updates
2014-02-17 10:43:58
  • Multiple Updates
2013-05-11 00:10:24
  • Multiple Updates