CVEvulnerability
CVE-2009-0961
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-06-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the call approval dialog when another alert appears, which might allow remote attackers to force the iPhone to place a call without user approval by causing an application to trigger an alert.
Affected configurations
• apple iphone os 1.0.0
• apple iphone os 1.0.1
• apple iphone os 1.0.2
• apple iphone os 1.1.0
• apple iphone os 1.1.1
• apple iphone os 1.1.2
• apple iphone os 1.1.3
• apple iphone os 1.1.4
• apple iphone os 1.1.5
• apple iphone os 2.0
• apple iphone os 2.0.0
• apple iphone os 2.0.1
• apple iphone os 2.0.2
• apple iphone os 2.1
• apple iphone os 2.1.1
• apple iphone os 2.2
• apple iphone os 2.2.1
• apple iphone os
• apple ipod touch
References
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html Vendor Advisory
- http://osvdb.org/55238 osvdb.org
- http://support.apple.com/kb/HT3639 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35414 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1621 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51210 exchange.xforce.ibmcloud.com
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html Vendor Advisory
- http://osvdb.org/55238 osvdb.org
- http://support.apple.com/kb/HT3639 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35414 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1621 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51210 exchange.xforce.ibmcloud.com