Description
Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not isolate the call-approval dialog from the process of launching new applications, which allows remote attackers to make arbitrary phone calls via a crafted HTML document.
References
- APPLE-SA-2008-11-20 vendor-advisory
- ADV-2008-3232 vdb-entry
- 1021264 vdb-entry
- http://support.apple.com/kb/HT3318
- 32394 vdb-entry
- 50030 vdb-entry
- 32756 third-party-advisory