RCE in Apple Iphone OS

CVE-2010-1177

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving document.write calls with long crafted strings.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.072 (93.7th percentile) — read the EPSS interpretation.

Affected products

Apple Iphone_os — versions 3.1.3
Apple Safari
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)