Published: 19/06/2009 Updated: 09/08/2022

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 515

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

The Mail component in Apple iPhone OS 1.0 up to and including 2.2.1 and iPhone OS for iPod touch 1.1 up to and including 2.2.1 dismisses the call approval dialog when another alert appears, which might allow remote malicious users to force the iPhone to place a call without user approval by causing an application to trigger an alert.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple iphone_os 1.0.2
apple iphone_os 2.2
apple iphone_os 1.1.1
apple iphone_os 2.0.0
apple iphone_os 1.1.2
apple iphone_os 1.1.3
apple iphone_os 1.1.0
apple iphone_os 1.0.1
apple iphone_os 2.1
apple iphone_os 2.2.1
apple iphone_os 2.0
apple iphone_os 1.1.5
apple iphone_os 1.0.0
apple iphone_os 2.1.1
apple iphone_os 1.1.4
apple iphone_os 2.0.1
apple iphone_os 2.0.2
apple iphone_os
apple ipod_touch

source: wwwsecurityfocuscom/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and place a call automatically from a vulnerable device NOTE: This issue was previously co ...

source: wwwsecurityfocuscom/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and place a call automatically from a vulnerable device NOTE: This issue was previou ...

source: wwwsecurityfocuscom/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and place a call automatically from a vulnerable device NOTE: This issue was previously ...

NVD-CWE-Other http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html http://support.apple.com/kb/HT3639 http://www.vupen.com/english/advisories/2009/1621 http://www.securityfocus.com/bid/35414 http://osvdb.org/55238 https://exchange.xforce.ibmcloud.com/vulnerabilities/51210 https://nvd.nist.gov https://www.exploit-db.com/exploits/33044/

CVE-2009-0961

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect