Safari in Apple iOS prior to 9 allows remote malicious users to spoof the relationship between URLs and web content via a crafted web site.
apple iphone os