Apple iPhone functionality abuse
Published:		18.06.2009
Source:		BUGTRAQ
SecurityVulns ID:		10001
Type:		client
Level:		6/10
Description:		By using tel: URI it's possible to force phone to dial some number without user's confirmation.

Affected:		APPLE : iPhone OS 2.1
		APPLE : iPhone OS 1.5

Original document

Collin R. Mulliner, iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008) (18.06.2009)

Discuss:

Read or add your comments to this news (0 comments)