Apple releases iPhone firmware 3.0.1 to address ancient SMS security boo boo

July 31st, 2009 | Tags: , ,

But Apple does not release security patches for its exploit-free platforms? Well as soon as mass popularity is met, it is inevitable…

Update Available for: iPhone OS 1.0 through iPhone OS 3.0

Impact: Receiving a maliciously crafted SMS message may lead to an unexpected service interruption or arbitrary code execution

Description: A memory corruption issue exists in the decoding of SMS messages. Receiving a maliciously crafted SMS message may lead to an unexpected service interruption or arbitrary code execution. This update addresses the issue through improved error handling. Credit to Charlie Miller of Independent Security Evaluators, and Collin Mulliner of Fraunhofer SIT for reporting this issue.

Source: here

No comments yet.