Mail in Apple iOS prior to 9 allows remote malicious users to use an address-book contact as a spoofed e-mail sender address via unspecified vectors.
apple iphone os