3.0.1 ulkona

[iivarihy]

Näyttäisi paikkailevan tuota SMS aukkoa.

quickpwn.com
Remember that iPhone virus we wrote about here yesterday? Guess what, Apple has finally patched it! Today Apple released iPhone 3.0.1 which patches the exploit. Security expert Charlie Miller demonstrated the iPhone SMS Exploit in the Black Hat conference just yesterday, and It would of taken hackers at least two weeks to come up with a virus.
I knew Apple would come up with a patch, but I’m surprised that they were able to release it right after the day Charlie Miller revealed the exploit. Charlie Miller had notified Apple 6 weeks ago and they didn’t do anything.
If you’re an iPhone, iPhone 3G, or iPhone 3GS user you must update to iPhone 3.0.1, iPhone 3G 3.0.1, or iPhone 3GS 3.0.1 firmware.

Apple:
iPhone OS 3.0.1
CoreTelephony

CVE-ID: CVE-2009-2204

Available for: iPhone OS 1.0 through iPhone OS 3.0

Impact: Receiving a maliciously crafted SMS message may lead to an unexpected service interruption or arbitrary code execution

Description: A memory corruption issue exists in the decoding of SMS messages. Receiving a maliciously crafted SMS message may lead to an unexpected service interruption or arbitrary code execution. This update addresses the issue through improved error handling. Credit to Charlie Miller of Independent Security Evaluators, and Collin Mulliner of Technical University Berlin for reporting this issue.

[inf]

grr missä ne omat silmät on....


http://hopeinenomena.net/viewtopic.php?f=71&t=128729

[iivarihy]

unihiekassa ilmeisesti.