Apple iPhone Call Approval Dialog Security Bypass Vulnerability
BID:35425
Info
Apple iPhone Call Approval Dialog Security Bypass Vulnerability
| Bugtraq ID: | 35425 |
| Class: | Design Error |
| CVE: |
CVE-2009-0961 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 17 2009 12:00AM |
| Updated: | Jun 18 2009 07:50PM |
| Credit: | Collin Mulliner of Fraunhofer SIT |
| Vulnerable: |
Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 1.1.4 Apple iPhone 1.1.3 Apple iPhone 1.1.2 Apple iPhone 1.1.1 Apple iPhone 1.0.2 Apple iPhone 1.0.1 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPhone 1.1 Apple iPhone 1 Apple iPhone 0 |
| Not Vulnerable: |
Apple iPhone 3.0 |
Discussion
Apple iPhone Call Approval Dialog Security Bypass Vulnerability
Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically.
Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and place a call automatically from a vulnerable device.
NOTE: This issue was previously covered in BID 35414 (Apple iPhone and iPod touch Prior to Version 3.0 Multiple Vulnerabilities), but has been assigned its own record to better document it.
Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically.
Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and place a call automatically from a vulnerable device.
NOTE: This issue was previously covered in BID 35414 (Apple iPhone and iPod touch Prior to Version 3.0 Multiple Vulnerabilities), but has been assigned its own record to better document it.
Exploit / POC
Apple iPhone Call Approval Dialog Security Bypass Vulnerability
To exploit this issue, an attacker will entice a user to visit a malicious website.
The following exploits are available:
To exploit this issue, an attacker will entice a user to visit a malicious website.
The following exploits are available:
Solution / Fix
Apple iPhone Call Approval Dialog Security Bypass Vulnerability
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
References
Apple iPhone Call Approval Dialog Security Bypass Vulnerability
References:
References:
- About the security content of iPhone OS 3.0 Software Update (Apple)
- Android Open Source Project Homepage (Android Open Source Project)
- iPhone Product Page (Apple)
- WebKit Homepage (WebKit Open Source Project)
- iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008)] (Collin Mulliner
- Re: iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008) (Mike Ely
- Re: iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008) (Collin Mulliner
- iPhone Safari phone-auto-dial (vulnerability) (Collin Mulliner)