CVE-2009-0961

This exploit leverages a security-bypass vulnerability in Apple iPhone's Safari browser to automatically place a call without user approval. It uses a JavaScript loop to generate a large SMS payload followed by a tel: URI to trigger the call.

This exploit demonstrates a security-bypass vulnerability in Apple iPhone's Safari browser, allowing automatic call placement without user approval by embedding a tel: URI in an iframe. The exploit leverages a meta refresh to redirect and a JavaScript timeout to trigger the call.

This exploit demonstrates a security-bypass vulnerability in Apple iPhone's Safari browser, allowing automatic call placement without user approval by embedding malicious 'tel:' and 'sms:' URIs in an HTML iframe. The PoC triggers multiple call dialogs to increase the likelihood of a successful attack.