CVE-2007-3753

Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service application termination and execute arbitrary code via crafted Service Discovery Protocol SDP packets, related to insufficient input validation...

Input validation

Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service application termination and execute arbitrary code via crafted Service Discovery Protocol SDP packets, related to insufficient input validation...

CVE-2007-3755

Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing the number...

CVE-2007-3756

CVE-2007-3756 affects Safari in Apple iPhone 1.1.1 and Safari 3 prior to Beta Update 3.0.4 on Windows and macOS 10.4–10.4.10. A crafted web page can cause cross-domain access to reveal the URL of the parent window, enabling information disclosure. Affected components: Safari web browser on iPhone...

CVE-2007-3757

CVE-2007-3757 describes a vulnerability in Apple iPhone 1.1.1 where the embedded Safari browser mishandles tel: links, allowing a crafted link to cause the user to initiate a call to a different number than the one displayed. The issue affects the iPhone’s handling of tel: hyperlinks; exploitatio...

CVE-2007-3754

CVE-2007-3754 : The Apple iPhone Mail client in iPhone OS 1.1.1 does not warn users when the mail server identity changes or is untrusted while using SSL, which could enable a remote attacker to perform a MITM, stealing credentials and reading email. The available connected sources confirm the af...

CVE-2007-3757

Safari in Apple iPhone 1.1.1 allows remote user-assisted attackers to trick the iPhone user into making calls to arbitrary telephone numbers via a crafted "tel:" link that causes iPhone to display a different number than the number that will be dialed...

CVE-2007-3755

The CVE-2007-3755 issue affects the Apple iPhone’s Mail client (around v1.1.1) where embedded tel: links can trigger phone calls without user confirmation. The root cause is processing tel: hyperlinks in the Mail client that allows remote user-assisted attackers to cause the device to dial arbitr...

CVE-2007-3753

Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service application termination and execute arbitrary code via crafted Service Discovery Protocol SDP packets, related to insufficient input validation...

CVE-2007-3755

Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing the number...

CVE-2007-3753

CVE-2007-3753 affects Apple iPhone 1.1.1 with Bluetooth enabled. The issue arises in the Bluetooth SDP packet handling, where insufficient input validation allows a physically proximate attacker to terminate the affected application (DoS) and potentially execute arbitrary code. The vulnerability ...

CVE-2007-3754

Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credentials and read email via a man-in-the-middle MITM attack...

PT-2007-4994 · Apple · Iphone

Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue allows physically proximate attackers to cause a denial of service and execute arbitrary code via crafted Service Discovery Protocol SDP packets. This is related to insufficient input validati...

PT-2007-5829 · Apple · Iphone +2

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 3.0.4 on Windows and Mac OS X Safari in Apple iPhone version 1.1.1 Description: The issue allows remote attackers to alter or access HTTPS content via an HTTP session with a crafted web page that causes Javascript to ...

PT-2007-5002 · Apple · Iphone

Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML by causing Javascript events to be applied to a frame in another domain. This is a general information abo...

PT-2007-4998 · Apple · Iphone

Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue allows remote user-assisted attackers to trick the iPhone user into making calls to arbitrary telephone numbers via a crafted "tel:" link. This link causes the iPhone to display a different...

PT-2007-4995 · Apple · Iphone

Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue allows remote attackers to steal credentials and read email via a man-in-the-middle MITM attack because Mail in Apple iPhone does not warn the user when the mail server changes or is not trust...

PT-2007-4997 · Apple · Iphone +1

Name of the Vulnerable Software and Affected Versions: Safari versions 3 before Beta Update 3.0.4 Safari in Apple iPhone version 1.1.1 Description: The issue allows remote attackers to obtain sensitive information via a crafted web page that identifies the URL of the parent window, even when the...

PT-2007-4999 · Apple · Iphone +2

Name of the Vulnerable Software and Affected Versions: Safari versions 3 before Beta Update 3.0.4 Safari in Apple iPhone version 1.1.1 Safari in Mac OS X versions 10.4 through 10.4.10 Description: The issue allows remote attackers to set Javascript window properties for web pages that are in a...

PT-2007-5001 · Apple · Iphone +1

Name of the Vulnerable Software and Affected Versions: Safari versions 3 before Beta Update 3.0.4 Safari in Apple iPhone version 1.1.1 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via frame tags. Recommendations: For Safari versions 3...