Memory corruption left iPhone open to attack
By Larry Dignan
Published: 3 August 2009 14:31 GMT
Apple has plugged an SMS flaw that could enable an attacker to take complete control over an iPhone.
Researchers Charlie Miller and Collin Mulliner said at the Black Hat security conference that an attacker could use the SMS exploit to make calls, swipe data and send text messages. The attack was enabled by a memory corruption bug in all iPhone operating systems.
Apple was notified of the problem six weeks ago but did not deliver a patch. That changed on Friday when Apple patched CVE-2009-2204.
Apple said: "A memory corruption issue exists in the decoding of SMS messages. Receiving a maliciously crafted SMS message may lead to an unexpected service interruption or arbitrary code execution. This update addresses the issue through improved error handling."
Original article from ZDNet.com: Apple plugs iPhone SMS hole
The role will involve the assessment of vulnerabilities, patch testing and application deployment via remote systems such as SMS/SCCM, WSUS and ...
Patch management on Windows and UNIX (Solaris and SUSE Enterprise Linux). This role involves carrying out daily, weekly and monthly checklists, ...
iPhone Mobile Developer - Manchester. Our growing client based in Manchester is currently looking for a skilled iphone Mobile Developer to design and ...
Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.
Stories from the web...
Copyright © 2008 CBS Interactive Limited. All rights reserved. Top of page
Digg
Slashdot
Del.icio.us
Stumble
Reddit
RSS Feeds
Bob Tarzey Why you must rein in your power users When they do damage, it can be catastrophic to your business
Jon Collins Is losing a mobile device really such a big deal? How to minimise the damage to your business