|
Apple iPhone / iPod touch Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA32756
|
|
|
Release Date:
|
2008-11-21
|
|
Last Update:
|
2009-06-18
|
|
Popularity:
|
5,742 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Security Bypass
Spoofing
Exposure of sensitive information
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Apple iPhone
Apple iPod touch
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 2 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Solution:
Update to iPhone OS 2.2 or iPhone OS for iPod touch 2.2 (downloadable and installable via iTunes).
Provided and/or discovered by:
11) Collin Mulliner, Fraunhofer SIT
The vendor credits:
1) Michal Zalewski, Google
3) Sergio 'shadown' Alvarez, n.runs AG
4) Stephen Butler, University of Illinois
7) Nolen Scaife
9) Haifei Li of Fortinet's FortiGuard Global Security Research Team
10) John Resig, Mozilla Corporation
12) an anonymous researcher
Changelog:
2009-06-18: Added link to "Original Advisory" section.
Original Advisory:
Apple:
http://support.apple.com/kb/HT3318
Collin Mulliner:
http://www.mulliner.org/security/advi...-auto-dial_vulnerability_advisory.txt
Other References:
SA31326:
http://secunia.com/advisories/31326/
SA31610:
http://secunia.com/advisories/31610/
SA32222:
http://secunia.com/advisories/32222/
SA32706:
http://secunia.com/advisories/32706/
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
