Apple iOS iAd Content Display URL Scheme Handling Security Bypass Vulnerability

Bugtraq ID:	45007
Class:	Input Validation Error
CVE:	CVE-2010-3828
Remote:	Yes
Local:	No
Published:	Nov 22 2010 12:00AM
Updated:	Nov 22 2010 12:00AM
Credit:	Aaron Sigel of vtty.com
Vulnerable:	Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 2.1 Apple iOS 2.0
Not Vulnerable:	Apple iOS 4.2

Apple iOS iAd Content Display URL Scheme Handling Security Bypass Vulnerability

Apple iOS is prone to a security-bypass vulnerability that may result in the placing of arbitrary telephone calls. This issue affects iAd Content Display.

An attacker can invoke telephone calls on an affected device by enticing an unsuspecting user to visit a specially crafted web page that contains a URL Scheme associated with initiating a telephone call.

Apple iOS iAd Content Display URL Scheme Handling Security Bypass Vulnerability

Attackers can exploit this issue by enticing an unsuspecting user into visiting a specially crafted webpage with an affected device's browser.

Apple iOS iAd Content Display URL Scheme Handling Security Bypass Vulnerability

Solution:
Updates are available; please see the references for more information.

Apple iOS iAd Content Display URL Scheme Handling Security Bypass Vulnerability

References:

• Apple Homepage (Apple)
  
• iPhone Homepage (Apple)