PT-2008-5526 · Apple · Ios+2

CVE-2008-4233 · Publicado 2008-11-25 · Atualizado 2022-08-09

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Safari in Apple iPhone OS versions 1.0 through 2.1 Safari in Apple iPhone OS for iPod touch versions 1.1 through 2.1

Description: The issue allows remote attackers to make arbitrary phone calls via a crafted HTML document because Safari does not isolate the call-approval dialog from the process of launching new applications.

Recommendations: For Apple iPhone OS versions 1.0 through 2.1, consider disabling the launch of new applications from within Safari until a fix is available. For Apple iPhone OS for iPod touch versions 1.1 through 2.1, restrict access to Safari when making phone calls to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2008-4233

Produtos afetados

Safari

Ios

Ipod Touch

Referências · 8

• http://vupen.com/english/advisories/2008/3232 · Nota
• http://support.apple.com/kb/HT3318 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-4233 · Nota de Segurança
• http://secunia.com/advisories/32756 · Nota
• http://securityfocus.com/bid/32394 · Nota
• http://securitytracker.com/id?1021264 · Nota
• http://osvdb.org/50030 · Nota