CVE-2008-1002

MEDIUM 4.3CVE-2008-1002 · Published 19/03/2008 · updated 16/06/2026

In short

CVE-2008-1002 is a MEDIUM (CVSS 4.3) vulnerability affecting safari (apple).
Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
safari apple	`= 0.8= 0.9= 1.0= 1.1= 1.2= 1.3= 1.3.1= 1.3.2= 2.0= 2.0.2= 2.0.4= 3.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a crafted javascript: URL.

References

docs.info.apple.com/article.html
lists.apple.com/archives/security-announce/2008/Mar/msg00000.html · Patch
secunia.com/advisories/29393
kb.cert.org/vuls/id/766019 · US Government Resource
securityfocus.com/bid/28290
securityfocus.com/bid/28328
securitytracker.com/id
us-cert.gov/cas/techalerts/TA08-079A.html · US Government Resource
vupen.com/english/advisories/2008/0920/references
exchange.xforce.ibmcloud.com/vulnerabilities/41335

More vulnerabilities in safari

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

= 0.8= 0.9= 1.0= 1.1= 1.2= 1.3= 1.3.1= 1.3.2= 2.0= 2.0.2= 2.0.4= 3.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4

No fix yet

More vulnerabilities in safari

See all →