iPhone News Updated

Apple’s New iPhone OS Patches Bugs, Too

Apple released version 3.0 of the iPhone OS on Wednesday. New features are getting all the attention, but Apple has also announced that this version addresses 46 vulnerabilities in earlier releases.

The oldest of these, CVE-2008-2320, was revealed last July, and can result in arbitrary code execution from viewing a web page abuses CSS color strings.

20 of the 46 vulnerabilities fixed are listed by Apple as leading potentially to arbitrary code execution. Other potential impacts include unexpected device reset, cross-site scripting, unauthorized information disclosure, a weakened password policy, and “[A]n application that causes an alert to appear may initiate a phone call without user interaction.”

Check back with us in a few months or years, as the new features in iPhone OS 3.0 undoubtedly have new vulnerabilities of their own.

[Thanks: http://www.pcmag.com]

Tweet This Post 

Comments are closed.