CVE-2007-3757 : Safari in Apple iPhone 1.1.1 allows remote user-assisted attackers to trick the

Safari in Apple iPhone 1.1.1 allows remote user-assisted attackers to trick the iPhone user into making calls to arbitrary telephone numbers via a crafted "tel:" link that causes iPhone to display a different number than the number that will be dialed.

Published 2007-09-27 21:17:00

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2007-3757

Apple » Safari
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Iphone » Version: 1.0
When used together with: Apple » Iphone Os » Version: 1.0.1
When used together with: Apple » Iphone Os » Version: 1.0.2

Exploit prediction scoring system (EPSS) score for CVE-2007-3757

EPSS FAQ

0.99%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 75 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-3757

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

CWE ids for CVE-2007-3757

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-3757

Jump to

Vulnerability Details : CVE-2007-3757

Products affected by CVE-2007-3757

Exploit prediction scoring system (EPSS) score for CVE-2007-3757

CVSS scores for CVE-2007-3757

CWE ids for CVE-2007-3757

References for CVE-2007-3757