A security firm has found a denial-of-service flaw in the browser for Apple’s iPhone.