Apple iOS 'facetime-audio://' Security Bypass Vulnerability

Bugtraq ID:	66108
Class:	Unknown
CVE:	CVE-2013-6835
Remote:	Yes
Local:	No
Published:	Mar 10 2014 12:00AM
Updated:	Mar 10 2014 12:00AM
Credit:	Guillaume Ross
Vulnerable:	Apple iPod Touch 0 Apple iPhone 4.0 Apple iPad 0 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 beta Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0
Not Vulnerable:

Apple iOS 'facetime-audio://' Security Bypass Vulnerability

Apple iOS is affected by a security-bypass vulnerability.

Successfully exploiting this issue may allow an attacker to bypass certain security warnings. This may aid in further attacks.

These issues affect Apple iOS versions prior to 7.1.

Note: This issue was previously discussed in BID 66087 (Apple iOS APPLE-SA-2014-03-10-1 Multiple Security Vulnerabilities), but has been moved to its own record to better document it.

Apple iOS 'facetime-audio://' Security Bypass Vulnerability

An attacker can exploit this issue using a web browser.

The following example input is available:

<iframe src="facetime-audio://user () host com"></iframe>

Apple iOS 'facetime-audio://' Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple iOS 'facetime-audio://' Security Bypass Vulnerability

References:

• Apple iOS Homepage (Apple)