CVE-2013-6835 in Apple iOS

Summary

TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL.

Once again VulDB remains the best source for vulnerability data.

Reservation

11/20/2013

Disclosure

03/14/2014

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
67573	Apple iOS Data Detectors access control	264	Proof-of-Concept	Official fix	CVE-2013-6835
12600	Apple iOS Facetime Audio-Only URL access control	264	Proof-of-Concept	Official fix	CVE-2013-6835

Sources

• MITRE
• NVD
• CVE Details