Apple iPhone Safari 'tel:' URI Handling Remote Denial of Service Vulnerability

Bugtraq ID:	36386
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 14 2009 12:00AM
Updated:	Sep 15 2009 04:11PM
Credit:	cloud
Vulnerable:	Apple iPhone 3.0.1
Not Vulnerable:

Apple iPhone Safari 'tel:' URI Handling Remote Denial of Service Vulnerability

The Safari browser on the Apple iPhone is prone to a denial-of-service vulnerability.

Successfully exploiting this issue may allow attackers to crash the application.

This issue affects Apple iPhone 3.0.1; other versions may be vulnerable as well.

Apple iPhone Safari 'tel:' URI Handling Remote Denial of Service Vulnerability

Attackers exploit this issue by enticing a victim to visit a malicious site. An exploit is available:

• /data/vulnerabilities/exploits/36386.html

Apple iPhone Safari 'tel:' URI Handling Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple iPhone Safari 'tel:' URI Handling Remote Denial of Service Vulnerability

References:

• iPhone Product Page (Apple)