CVE-2007-3757: Apple Safari

Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days.

Safari in Apple iPhone 1.1.1 allows remote user-assisted attackers to trick the iPhone user into making calls to arbitrary telephone numbers via a crafted "tel:" link that causes iPhone to display a different number than the number that will be dialed.

Affected products

• Apple Safari: any version

Published 2007-09-27. Last modified 2026-06-16.