Apple resolves five iPhone bugs with update

Flaws could allow malicious code execution.

Apple has released an iPhone and iPod Touch security update to close five vulnerabilities, some of which could allow hackers to launch malicious code.

iPhone operating system version 3.1.3, which is also installed on the iPod Touch, closes dangerous flaws in CoreAudio, ImageIO and WebKit that could permit arbitrary code execution, according to an advisory.

In the case of CoreAudio, malware could be loaded onto a device if a user is tricked into playing a maliciously crafted MP4 audio file, the advisory said. The ImageIO bug allows malware to be installed if a user views a maliciously crafted TIFF image.

There are two bugs in WebKit, Mac's web browser engine. One involves an input validation issue and can lead to remote attacks if a user accesses a maliciously crafted FTP server, Apple said. The other, less severe flaw could be exploited to cause the device's inbox to load remote audio and video content when remote image loading is disabled.

Finally, the update filled a memory corruption hole in Recovery Mode that could have permitted a person with physical access to a locked device the ability to access data, the advisory said.

See original article on scmagazineus.com

Copyright © SC Magazine, US edition
Apple resolves five iPhone bugs with update

What are your thoughts on this article? Add your comment below.

To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.

NOTE: You must be a registered member of SC Magazine to post a comment.

Click here to login | Click here to register
comments powered by Disqus
Sign up to receive SC Magazine email newsletters
   FOLLOW US...
Most Read