16 matches found
EUVD-2015-3923
Malware in sbrugna...
CVE-2015-3888
Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL...
Design/Logic Flaw
Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL...
CVE-2015-3888
CVE-2015-3888 affects Jolla Sailfish OS before 1.1.2.16. The issue is in the tel: URL handling, where spaces in the URL can be exploited to spoof the caller ID and trigger calls to arbitrary numbers. This is a remote defense/reachability concern for users and operators relying on accurate caller ...
CVE-2015-3888
Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL...
CVE-2015-3888: Improper Access Control
Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL...
CVE-2017-2404: URL Redirection to Untrusted Site
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016...
CVE-2016-1770
The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...
Design/Logic Flaw
The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...
CVE-2016-1770
The CVE-2016-1770 issue affects the Reminders component in OS X El Capitan prior to 10.11.4. Root cause: a tel: URL triggering a dialing action without user confirmation due to insufficient entitlement checks. Impact: ability to trigger a call without prompting the user. Mitigation: Apple release...
CVE-2016-1770
The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...
CVE-2016-1770: Improper Access Control
The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...
Design/Logic Flaw
The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service device hang via a long tel: URL that triggers a large size for the acceptance dialog...
CVE-2011-3432
CVE-2011-3432 affects Apple iOS up to versions before 5.0, specifically the UIKit Alerts component. A malicious page can trigger a denial of service (device hang) by delivering an excessively long tel: URL that makes the acceptance dialog large. Root cause: an overly large maximum URI/text layout...
CVE-2011-3432: Undefined Security Weakness
The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service device hang via a long tel: URL that triggers a large size for the acceptance dialog...