CVE-2010-1757

Vulnerability

WebKit in Apple iOS prior to version 4 on iPhone and iPod touch does not enforce boundary restrictions on content displayed within an IFRAME element. This allows a remote attacker to craft an HTML document that spoofs the user interface. The bug affects iOS 2.0 through 3.1.3 for iPhone 3G and later, and iOS 2.1 through 3.1.3 for iPod touch (2nd generation) and later [1].

Exploitation

An attacker can host a malicious web page containing a specially crafted IFRAME that violates expected content boundary limitations. No authentication or special network position beyond standard web access is required; the victim simply needs to visit the attacker's page in Safari or any WebKit-based browser on the affected device [1].

Impact

Successful exploitation lets the attacker spoof the user interface of the browser or the device, potentially tricking the user into performing actions such as entering credentials or approving transactions that appear legitimate but are controlled by the attacker [1].

Mitigation

Apple addressed this vulnerability in iOS 4, released on June 21, 2010. Devices must be updated via iTunes to iOS 4 or later. No workarounds are documented. The issue is not listed on CISA's Known Exploited Vulnerabilities (KEV) catalog [1].