20 matches found
EUVD-2015-3923
Malware in sbrugna...
CVE-2015-3888
Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL...
Design/Logic Flaw
Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL...
CVE-2015-3888
Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL...
CVE-2015-3888
CVE-2015-3888 affects Jolla Sailfish OS before 1.1.2.16. The issue is in the tel: URL handling, where spaces in the URL can be exploited to spoof the caller ID and trigger calls to arbitrary numbers. This is a remote defense/reachability concern for users and operators relying on accurate caller ...
PT-2018-4372
Name of the Vulnerable Software and Affected Versions Jolla Sailfish OS versions prior to 1.1.2.16 Description The issue allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL. Recommendations For versions prior to 1.1.2.16, update to versio...
CVE-2015-3888: Improper Access Control
Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL...
PT-2017-1741
Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3 Description The issue involves the Quick Look component and allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document. This issue has been exploited in the wild. The...
CVE-2017-2404: URL Redirection to Untrusted Site
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016...
CVE-2016-1770
The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...
Design/Logic Flaw
The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...
CVE-2016-1770
The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...
CVE-2016-1770
The CVE-2016-1770 issue affects the Reminders component in OS X El Capitan prior to 10.11.4. Root cause: a tel: URL triggering a dialing action without user confirmation due to insufficient entitlement checks. Impact: ability to trigger a call without prompting the user. Mitigation: Apple release...
CVE-2016-1770: Improper Access Control
The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...
PT-2016-1538
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.4 Description The issue is related to the Reminders component in Apple OS X, which has inadequate access control. This allows attackers to bypass the intended user-confirmation requirement. By exploiting this...
Design/Logic Flaw
The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service device hang via a long tel: URL that triggers a large size for the acceptance dialog...
CVE-2011-3432
CVE-2011-3432 affects Apple iOS up to versions before 5.0, specifically the UIKit Alerts component. A malicious page can trigger a denial of service (device hang) by delivering an excessively long tel: URL that makes the acceptance dialog large. Root cause: an overly large maximum URI/text layout...
PT-2011-4455
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 5 Description The issue concerns the UIKit Alerts component, which can be exploited by remote attackers to cause a denial of service, resulting in a device hang. This is achieved by using a long tel: URL that trigge...
CVE-2011-3432: Undefined Security Weakness
The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service device hang via a long tel: URL that triggers a large size for the acceptance dialog...