Apple Safari IPhone - using tel: Remote Crash

Apple Safari Iphone Crash using tel: Found by cloud : cloudatmadpowahdotorg http://blog.madpowah.org Tested on Iphone 3G, OS 3.0.1 Launch Safari, enter the page and after a few seconds Safari will crash and black screen will appear Exploit: '; ? milw0rm.com 2009-09-14...

Apple Safari IPhone - using tel: Remote Crash

Apple Safari IPhone - using tel: Remote Crash Apple Safari Iphone Crash using tel: Found by cloud : cloudatmadpowahdotorg http://blog.madpowah.org Tested on Iphone 3G, OS 3.0.1 Launch Safari, enter the page and after a few seconds Safari will crash and black screen will appear Exploit: '; ?...

iPhone Safari Phone Auto Dial

Released since Apple published the iPhone 3.0 security fixes. Vulnerability Report --- BEGIN ADVISORY --- Manufacturer: Apple www.apple.com Device: iPhone 3G iPhone 1st Gen Firmware: 2.1 possible earlier versions Device Type: smart phone Subsystems: Safari and mobile telephony...

Apple iPhone functionality abuse

By using tel: URI it's possible to force phone to dial some number without user's confirmation...

Dan Geer: Risk management should change the future

By Joan Goodchild, CSO “The dean of the security deep thinkers,” “security luminary, ” and “risk-management pioneer” are all phrases that have been used to describe Dan Geer. Considered one of the foremost leaders in information security, his resume includes time as president and chief scientist ...

CVE-2008-5826

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware allows remote attackers to cause a denial of service device crash via 1 a large value in the payload length field in an NDEF record, or a certain length for a 2 tel: or 3 sms: NDEF URI...

Design/Logic Flaw

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware allows remote attackers to cause a denial of service device crash via 1 a large value in the payload length field in an NDEF record, or a certain length for a 2 tel: or 3 sms: NDEF URI...

Design/Logic Flaw

The SmartPoster implementation on the Nokia 6131 Near Field Communication NFC phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR aka \r, and . dot characters, which allows remote attackers to trick a user into loadi...

CVE-2008-5826

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware allows remote attackers to cause a denial of service device crash via 1 a large value in the payload length field in an NDEF record, or a certain length for a 2 tel: or 3 sms: NDEF URI...

Nokia 6131存在多个漏洞

BUGTRAQ ID: 30716 CNCAN ID：CNCAN-2008081804 Nokia 6131是一款支持近距离通信NFC的手机设备。 Nokia 6131设备存在URL欺骗和拒绝服务攻击，远程攻击者可以利用漏洞使设备崩溃，造成拒绝服务攻击。 当显示NDEF Smart Poster和明文URI标签的内容时存在URI/URL欺骗，当装载WEB页时浏览器不正确显示完全的主机名。 NDEF记录解析器在处理包含0xFFFFFFFF或0xFFFFFFFE的记录负载长度字段时会导致崩溃。 当电话号码超过124个字符时，SMS和TEL URI处理器会崩溃。 Nokia 6131...

Apple iPhone Safari浏览器非授权tel:初始化漏洞

BUGTRAQ ID: 25854 CVECAN ID: CVE-2007-3757 Apple iPhone是苹果最新发布的智能手机。 iPhone中内嵌的Safari浏览器在处理“tel:”链接时存在漏洞，可能导致无意地拨打电话。 iPhone中内嵌的Safari浏览器支持使用电话链接（tel:）拨打电话号码。在选择电话链接时，Safari会确认是否要拨打该号码。恶意的特制电话链接可能会导致在确认期间显示不同的号码，在确认期间退出Safari也可能导致非预期地进行确认。 Apple iPhone 1.0.1 Apple iPhone 1...

Apple iPhone Mail非授权tel:初始化漏洞

BUGTRAQ ID: 25862 CVECAN ID: CVE-2007-3755 Apple iPhone是苹果最新发布的智能手机。 iPhone中内嵌的Mail邮件客户端在处理邮件中内嵌的“tel:”链接时存在漏洞，可能导致无意地拨打电话。 iPhone中内嵌的Mail邮件客户端支持使用电话链接（tel:）拨打电话号码。如果用户受骗跟随了邮件消息中的电话链接的话，攻击者就可以导致iPhone未经用户确认便拨打电话。 Apple iPhone 1.0.1 Apple iPhone 1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Code injection

Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing the number...

icq-xss.txt

Title: ICQ Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk Date: 10 January 2006 MorX Security Research Team http://www.morx.org Service: Web/Chat Vendor: ICQ.com Vulnerability: Cross Site Scripting / Cookie-Theft / Relogin attacks Severity: Medium/High Tested on: Microsoft IE 6.0 and...