Exploitation Summary
EIP tracks 3 public exploits for CVE-2009-0961. PoCs published by Collin Mulliner.
AI-analyzed exploit summary This exploit leverages a security-bypass vulnerability in Apple iPhone's Safari browser to automatically place a call without user approval. It uses a JavaScript loop to generate a large SMS payload followed by a tel: URI to trigger the call.
Description
The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the call approval dialog when another alert appears, which might allow remote attackers to force the iPhone to place a call without user approval by causing an application to trigger an alert.
Exploits (3)
This exploit leverages a security-bypass vulnerability in Apple iPhone's Safari browser to automatically place a call without user approval. It uses a JavaScript loop to generate a large SMS payload followed by a tel: URI to trigger the call.
This exploit demonstrates a security-bypass vulnerability in Apple iPhone's Safari browser, allowing automatic call placement without user approval by embedding a tel: URI in an iframe. The exploit leverages a meta refresh to redirect and a JavaScript timeout to trigger the call.
This exploit demonstrates a security-bypass vulnerability in Apple iPhone's Safari browser, allowing automatic call placement without user approval by embedding malicious 'tel:' and 'sms:' URIs in an HTML iframe. The PoC triggers multiple call dialogs to increase the likelihood of a successful attack.