CVE-2015-3758 in Apple iOS
Summary
UIKit WebView in Apple iOS before 8.4.1 allows attackers to bypass an intended user-confirmation requirement and initiate arbitrary FaceTime calls via an app that provides a crafted URL.
Reservation
05/07/2015
Disclosure
08/16/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 77172 | Apple iOS UIKit WebView input validation | 20 | Not defined | Official fix | CVE-2015-3758 |