CVE-2009-0961

The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the call approval dialog when another alert appears, which might allow remote attackers to force the iPhone to place a call without user approval by causing an application to trigger an alert.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

6.38% chance of exploitation in the next 30 days, 93th percentile

Published

2009-06-19

Updated

2024-08-07

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/33046
• https://www.exploit-db.com/exploits/33045
• https://www.exploit-db.com/exploits/33044

References

• CVE Record
• NVD entry

Related

• CVE-2009-0955
• CVE-2009-0963
• CVE-2009-0950
• CVE-2009-0964
• CVE-2009-0949
• CVE-2009-0965