Monday, September 14, 2009

Pingie: HTTP:: The Security Content of iPhone OS 3 1 OS 3 1 1 for iPod touch

HTTP:: The Security Content of iPhone OS 3 1 OS 3 1 1 for iPod touch
--------
Besides adding new features, tweaks and fixes in the latest software update to the iPhone OS, Apple has included a number of security patches as well, resolving recently discovered vulnerabilities in the software on both the iPhone side of the OS, and for iPod touch. According to an Apple Support piece detailing “the security content of iPhone OS 3.1 and iPhone OS 3.1.1 for iPod touch,” almost a dozen bugs have been patched in OS 3.1 for iPhone and OS 3.1.1 for iPod touch, spanning areas like CoreAudio, Exchange Support and MobileMail. Even a “Recovery Mode” issue has been found in previous versions of the iPhone OS. Apple reveals that, “A heap buffer overflow exists in Recovery Mode command parsing,” an issue that “may allow another person with physical access to the device to bypass the passcode, and access the user's data. This update addresses the issue through improved bounds checking.” Another issue, affecting only iPhone owners running iPhone OS 1.0!
through 3.0.1, is related to a null pointer dereference problem that exists in the software’s handling of SMS arrival notifications. Therefore, Apple says, “Receiving a maliciously crafted SMS message may lead to an unexpected service interruption.” To fix the...
--------
http://news.softpedia.com/news/The-Security-Content-of-iPhone-OS-3-1-OS-3-1-1-for-iPod-touch-121596.shtml
--------
This e-mail was sent by Experiment23 Inc., located in New York, NY
10163. To not receive further e-mails, please visit
http://help.pingie.com

No comments:

Post a Comment