PT-2008-5526 · Apple · Ios+2

Published 2008-11-25 · Updated 2022-08-09 · CVE-2008-4233

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Safari in Apple iPhone OS versions 1.0 through 2.1 Safari in Apple iPhone OS for iPod touch versions 1.1 through 2.1

Description: The issue allows remote attackers to make arbitrary phone calls via a crafted HTML document because Safari does not isolate the call-approval dialog from the process of launching new applications.

Recommendations: For Apple iPhone OS versions 1.0 through 2.1, consider disabling the launch of new applications from within Safari until a fix is available. For Apple iPhone OS for iPod touch versions 1.1 through 2.1, restrict access to Safari when making phone calls to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2008-4233

Affected Products

Safari

Ios

Ipod Touch

References · 8

• http://support.apple.com/kb/HT3318 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4233 · Security Note
• http://vupen.com/english/advisories/2008/3232 · Note
• http://secunia.com/advisories/32756 · Note
• http://securityfocus.com/bid/32394 · Note
• http://securitytracker.com/id?1021264 · Note
• http://osvdb.org/50030 · Note