CVE-2009-0961

EPSS 6.4%

The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the call approval dialog when another alert appears, which might allow remote attackers to force the iPhone to place a call without user approval by causing an application to trigger an alert.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 3

exploitdbwww.exploit-db.com/exploits/33044no verificado exploitdbwww.exploit-db.com/exploits/33045no verificado exploitdbwww.exploit-db.com/exploits/33046no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html http://osvdb.org/55238 https://exchange.xforce.ibmcloud.com/vulnerabilities/51210 http://support.apple.com/kb/HT3639 http://www.securityfocus.com/bid/35414 http://www.vupen.com/english/advisories/2009/1621