CVE-2007-3755

The CVE-2007-3755 issue affects the Apple iPhone’s Mail client (around v1.1.1) where embedded tel: links can trigger phone calls without user confirmation. The root cause is processing tel: hyperlinks in the Mail client that allows remote user-assisted attackers to cause the device to dial arbitr...

CVE-2007-3756

CVE-2007-3756 affects Safari in Apple iPhone 1.1.1 and Safari 3 prior to Beta Update 3.0.4 on Windows and macOS 10.4–10.4.10. A crafted web page can cause cross-domain access to reveal the URL of the parent window, enabling information disclosure. Affected components: Safari web browser on iPhone...

CVE-2007-3755

Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing the number...

CVE-2007-3753

CVE-2007-3753 affects Apple iPhone 1.1.1 with Bluetooth enabled. The issue arises in the Bluetooth SDP packet handling, where insufficient input validation allows a physically proximate attacker to terminate the affected application (DoS) and potentially execute arbitrary code. The vulnerability ...

CVE-2007-3757

CVE-2007-3757 describes a vulnerability in Apple iPhone 1.1.1 where the embedded Safari browser mishandles tel: links, allowing a crafted link to cause the user to initiate a call to a different number than the one displayed. The issue affects the iPhone’s handling of tel: hyperlinks; exploitatio...

PT-2007-5000 · Apple · Iphone +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue concerns Safari not fully disabling Javascript when requested, potentially leaving it open to unexpected attacks until Safari is restarted. Recommendations: For Apple iPhone version 1.1.1,...

PT-2007-4994 · Apple · Iphone

Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue allows physically proximate attackers to cause a denial of service and execute arbitrary code via crafted Service Discovery Protocol SDP packets. This is related to insufficient input validati...

PT-2007-5829 · Apple · Iphone +2

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 3.0.4 on Windows and Mac OS X Safari in Apple iPhone version 1.1.1 Description: The issue allows remote attackers to alter or access HTTPS content via an HTTP session with a crafted web page that causes Javascript to ...

PT-2007-5002 · Apple · Iphone

Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML by causing Javascript events to be applied to a frame in another domain. This is a general information abo...

PT-2007-4998 · Apple · Iphone

Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue allows remote user-assisted attackers to trick the iPhone user into making calls to arbitrary telephone numbers via a crafted "tel:" link. This link causes the iPhone to display a different...

PT-2007-4999 · Apple · Iphone +2

Name of the Vulnerable Software and Affected Versions: Safari versions 3 before Beta Update 3.0.4 Safari in Apple iPhone version 1.1.1 Safari in Mac OS X versions 10.4 through 10.4.10 Description: The issue allows remote attackers to set Javascript window properties for web pages that are in a...

PT-2007-5001 · Apple · Iphone +1

Name of the Vulnerable Software and Affected Versions: Safari versions 3 before Beta Update 3.0.4 Safari in Apple iPhone version 1.1.1 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via frame tags. Recommendations: For Safari versions 3...

PT-2007-4996 · Apple · Iphone

Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link. This link does not prompt the user before dialing the number...

PT-2007-4995 · Apple · Iphone

Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue allows remote attackers to steal credentials and read email via a man-in-the-middle MITM attack because Mail in Apple iPhone does not warn the user when the mail server changes or is not trust...

PT-2007-4997 · Apple · Iphone +1

Name of the Vulnerable Software and Affected Versions: Safari versions 3 before Beta Update 3.0.4 Safari in Apple iPhone version 1.1.1 Description: The issue allows remote attackers to obtain sensitive information via a crafted web page that identifies the URL of the parent window, even when the...

Apple iOS iPhone Vibrate

Causes the iPhone to vibrate, only works when the AudioToolkit library has been loaded. Based on work by Charlie Miller . This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 16 include...

Code injection

WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name IDN support and Unicode fonts, which allows remote attackers to create a URL containing "look-alike characters" homographs and possibly perform...

CVE-2007-3742

WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name IDN support and Unicode fonts, which allows remote attackers to create a URL containing "look-alike characters" homographs and possibly perform...

JVN#16018033 Safari URL spoofing vulnerability

Apple's Safari is a web browser installed as default with Mac OS X. There is a problem in Safari where URLs displayed in the address bar could be spoofed to deceive Safari users. This could be conducted by using Unicode characters that look alike to ASCII characters as URL strings. Impact As it i...

Apple iPhone多个安全漏洞

CVECAN ID: CVE-2007-2399,CVE-2007-2400,CVE-2007-2401,CVE-2007-3742,CVE-2007-3944 iPhone是蒴果公司开发的智能手机。 iPhone的实现上存在多个安全漏洞，可导致恶意操作浏览器或信息泄露。 具体漏洞条目如下： CVE-2007-2400 Safari处理JavsScript的实现上存在漏洞，远程攻击者可能利用此漏洞绕过同源策略非授权操作其他网页。 CVE-2007-3944...