PT-2009-3543 · Apple · Iphone+2

Collin Mulliner · Published 2009-06-19 · Updated 2022-08-09 · CVE-2009-0961

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple iPhone OS versions 1.0 through 2.2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.2.1

Description The issue allows remote attackers to potentially force the iPhone to place a call without user approval. This occurs when the Mail component dismisses the call approval dialog upon the appearance of another alert, possibly triggered by an application.

Recommendations For Apple iPhone OS versions 1.0 through 2.2.1, update to a version outside of this range to resolve the issue. For Apple iPhone OS for iPod touch versions 1.1 through 2.2.1, update to a version outside of this range to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2009-0961

Affected Products

Iphone

Ios

Ipod Touch

References · 10

• 🔥 https://exploit-db.com/exploits/33045 · Exploit
• 🔥 https://exploit-db.com/exploits/33046 · Exploit
• 🔥 https://exploit-db.com/exploits/33044 · Exploit
• http://support.apple.com/kb/HT3639 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0961 · Security Note
• http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html · Vendor Advisory
• http://osvdb.org/55238 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51210 · Note
• http://securityfocus.com/bid/35414 · Note
• http://vupen.com/english/advisories/2009/1621 · Note