NetSight
IP …
medium5.0Public exploit code

CVE-2013-6835

TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attacker…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL.

Affected products

VendorProductAffected versions
AppleIphone Os
through 7.0.6
Versions 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4

Weakness classification

CWE-264

References