CVE-2008-1589
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as...
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites.
Exploit likelihood
What each source reports
NVD Score used
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites.
- Record
CVE-2008-1589- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites.
- Record
CVE-2008-1589- Updated
- 2026-11-02
EUVDEUVD-2008-1590 No score
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites.
- Record
EUVD-2008-1590- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8mp7-jhrq-rxgx No score
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as...
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites.
- Record
GHSA-8mp7-jhrq-rxgx- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1589 is a medium vulnerability (CVSS 4.3) in Apple Safari, published July 14, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.21%, the 68th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/43734
securityfocus.com/bid/30186
jvn.jp/en/jp/JVN88676089/index.html
lists.apple.com/archives/security-announce/2008//Jul/msg00001.html
vupen.com/english/advisories/2008/2094/references
jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000039.html
secunia.com/advisories/31074
nvd.nist.gov/vuln/detail/CVE-2008-1589
github.com/advisories/GHSA-8mp7-jhrq-rxgx