CVE-2008-3612
9.8
CRITICAL · CVSS 3.1 · EPSS 3.5% (pctl 89)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 3.52% — more likely to be exploited than 89% of all CVEs |
| Weakness | CWE-330 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2008-09-11 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| apple | iphone os |
References
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html
- http://secunia.com/advisories/31823
- http://secunia.com/advisories/31900
- http://support.apple.com/kb/HT3026
- http://support.apple.com/kb/HT3129
- http://www.securityfocus.com/bid/31092
- http://www.securitytracker.com/id?1020848
- http://www.vupen.com/english/advisories/2008/2525
- http://www.vupen.com/english/advisories/2008/2558
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html
- http://secunia.com/advisories/31823
- http://secunia.com/advisories/31900
- http://support.apple.com/kb/HT3026
- http://support.apple.com/kb/HT3129
- http://www.securityfocus.com/bid/31092
- http://www.securitytracker.com/id?1020848
- http://www.vupen.com/english/advisories/2008/2525
- http://www.vupen.com/english/advisories/2008/2558
→ the Explorer · watch your stack · NVD