|
Apple iPhone / iPod touch Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA31074
|
|
|
Release Date:
|
2008-07-14
|
|
Last Update:
|
2009-01-06
|
|
Popularity:
|
5,917 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Security Bypass
Cross Site Scripting
Spoofing
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Apple iPhone
Apple iPod touch
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 2 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Solution:
Upgrade to version 2.0 (downloadable and installable via iTunes).
Provided and/or discovered by:
The vendor credits:
4) Hiromitsu Takagi
5) SkyLined, Google
6) Chris Weber, Casaba Security, LLC
7) James Urquhart
8) Peter Vreudegnhil, working with the TippingPoint Zero Day Initiative
10) Anthony de Almeida Lopes of Outpost24 AB, and Chris Evans of Google Security Team
11) Itzik Kotler and Jonathan Rom of Radware
12) Robert Swiecki of the Google Security Team, David Bloom, and Charlie Miller of Independent Security Evaluators
Changelog:
2008-07-28: Updated vulnerability #8. Added link to ZDI in "Original Advisory" section.
2009-01-06: Added reporter link to the "Original Advisory" section.
Original Advisory:
Apple:
http://support.apple.com/kb/HT2351
JVN:
http://jvn.jp/jp/JVN88676089/index.html
Chris Evans:
http://scary.beasts.org/security/CESA-2008-004.html
ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-08-045/
SkyLined:
http://lists.grok.org.uk/pipermail/full-disclosure/2009-January/066830.html
Other References:
SA20376:
http://secunia.com/advisories/20376/
SA28444:
http://secunia.com/advisories/28444/
SA29130:
http://secunia.com/advisories/29130/
SA29846:
http://secunia.com/advisories/29846/
SA30315:
http://secunia.com/advisories/30315/
SA30775:
http://secunia.com/advisories/30775/
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
