About the security content of iPhone v2.0 and iPod touch v2.0 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2006-2783n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2007-6284The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences
• CVE-2008-2307n/a: security vulnerability
• CVE-2008-2317n/a: security vulnerability
• CVE-2008-2303n/a: security vulnerability
• CVE-2008-1767n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2008-1588Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL
• CVE-2008-1589n/a: Improper Input Validation
• CVE-2008-1590n/a: security vulnerability
• CVE-2008-1026n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2008-1025n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2008-0177n/a: security vulnerability
• CVE-2008-0050CFNetwork in Apple Mac OS X 10.4.11 allows remote HTTPS proxy servers to spoof secure websites via data in a 502 Bad Gateway error

Source and provenance

Original title: About the security content of iPhone v2.0 and iPod touch v2.0 - Apple Support. Captured 18 Oct 2026, 08:07 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.