Security Advisory

CVE-2013-6835

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-03-14 10:00:00
Last updated 2024-08-06 17:46:23
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL.