The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service (Safari, Mail, or Springboard crash) via a crafted innerHTML property of a DIV element, related to a "malformed character" issue.
| Software | From | Fixed in |
|---|---|---|
| apple / iphone_os | 3.1 | 3.1.x |
| apple / iphone_os | 3.1.3 | 3.1.3.x |