CVE-2008-1036 Cross-site scripting in n/a

Medium 4.3 Published 2 Jun 2008 Updated 7 Aug 2024

Remote attackers can execute cross-site scripting attacks via malformed character sequences in the ICU library, affecting multiple operating systems.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2008-1036?

CVE-2008-1036 is a medium-severity cross-site scripting vulnerability in Apple Mac Os X, published on 2 Jun 2008. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.

Weakness: CWE-79

Which versions are affected by CVE-2008-1036?

It affects 3 products.

Linux distribution packages (12)

`icu` Red Hat:enterprise_linux:5::client	All versions	`0:3.6-5.11.2`
`icu-debuginfo` Red Hat:enterprise_linux:5::client	All versions	`0:3.6-5.11.2`
`libicu` Red Hat:enterprise_linux:5::client	All versions	`0:3.6-5.11.2`
`libicu-doc` Red Hat:enterprise_linux:5::client	All versions	`0:3.6-5.11.2`
`icu` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:3.6-5.11.2`
`icu-debuginfo` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:3.6-5.11.2`
`libicu-devel` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:3.6-5.11.2`
`icu` Red Hat:enterprise_linux:5::server	All versions	`0:3.6-5.11.2`
`icu-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:3.6-5.11.2`
`libicu` Red Hat:enterprise_linux:5::server	All versions	`0:3.6-5.11.2`
`libicu-devel` Red Hat:enterprise_linux:5::server	All versions	`0:3.6-5.11.2`
`libicu-doc` Red Hat:enterprise_linux:5::server	All versions	`0:3.6-5.11.2`

Products include Apple Mac Os X, Apple Mac Os X Server, Redhat Enterprise Linux.

How do I fix CVE-2008-1036?

Upgrade to a fixed version.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2008-1036 being exploited?

There is no known exploitation of CVE-2008-1036 in the wild and no public exploit code.

All Apple Mac Os X vulnerabilities

Sources

Also known as DEBIAN-CVE-2008-1036, DSA-1762-1, GHSA-w398-xcxp-rxmr, RHSA-2009:0296.