Security

Apple upgrades iPhone OS to fix vulnerability

August 5, 2009, 06:39 AM — 

Apple yesterday released version 3.0.1 of its iPhone OS, which includes a fix for a vulnerability found in the CoreTelephony component.

According to a post on Apple’s support site, the vulnerability could allow an attacker to execute code or cause an interruption in service if successful in sending a specific type of SMS message to a user. Specially crafted messages can cause a memory corruption on the phone when decoding the message.

Charlie Miller, principal analyst with Independent Security Evaluators who revealed the vulnerability at the Black Hat security conference last week, said the glitch could allow hackers to steal contact information and passwords, dial the iPhone, or send text messages.

 Apple’s iPhone isn’t the only device that could suffer from such an attack; Miller said phones running Microsoft’s Windows Mobile and Google’s Android operating systems could also be affected. Google says the vulnerability in Android has already been fixed.

The iPhone OS update is available to all iPhone users via an iTunes download.

Do you tweet? Follow me on Twitter here.

Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world

I like it!
Post a comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
peer-to-peer

Brian Proffitt
Microsoft/Novell: Breaking Down the Coupon Numbers

Esther Schindler
Drupal's Dries Buytaert on Building the Next Drupal

Tom Henderson
Top Ten General Operating Systems Rants

pasmith
PS3 motion controller delayed; goes up against Project Natal

sjvn
Neolithic Windows security hole alive and well in Windows 7

claird
Perl source code comparison makes for good reading

mikelgan
Cell phones don't create stress or interrupt much

Sandra Henry-Stocker
How to: The Unix Interview

 

Where Google Chrome security fails: the password
I heard mention that the Chrome OS will have some sort of encryption available a la bitlocker. If it's possible to encrypt personal data using another password or key, then it may have potential for very secure data.... And Ubuntu has an 'encrypt home directory' option, perhaps google should follow suit.
- Dann

Join the conversation here

The Daily Tip

The Daily TipQuick, practical advice for IT pros. Made fresh daily.

Hot tips:

Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.

Newsletters

Subscribe to ITWORLD TODAY and receive the latest IT news and analysis.

I would like to receive offers via email from ITworld partners.
By clicking submit you agree to the terms and conditions outlined in ITworld's privacy policy.
Marketplace