Vulnerability Details CVE-2010-1226
The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service (Safari, Mail, or Springboard crash) via a crafted innerHTML property of a DIV element, related to a "malformed character" issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.02
EPSS Ranking 83.0%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2010-1226
-
cpe:2.3:h:apple:iphone:2g
-
cpe:2.3:h:apple:iphone:3gs
-
cpe:2.3:o:apple:iphone_os:3.1
-
cpe:2.3:o:apple:iphone_os:3.1.3