Code execution holes in iPhone OS, iPod Touch

posted onFebruary 2, 2010
by hitbsecnews

Apple has shipped a patch to cover five documented vulnerabilities that expose iPhone and iPod Touch users to malicious hacker attacks.

The most serious flaw could allow remote code execution if an iPhone/iPod Touch user opens audio and image files. Here’s the skinny on the vulnerabilities being patched with this iPhone OS 3.1.3 and iPhone OS 3.1.3 for iPod Touch update:

CoreAudio (CVE-2010-0036)
ImageIO (CVE-2009-2285)
Recovery Mode (CVE-2010-0038)
WebKit (CVE-2009-3384)
WebKit (CVE-2009-2841)

Source

Tags

Security

You May Also Like

Other Articles In This Section

Recent News

Monday, May 20th

Two students find security bug that could let millions do laundry for free
Lazarus Group Moves $147.5M in Stolen Crypto (BTC, ETH) to North Korea, UN Report Reveals
Time Is Running Out in the Hunt for Rare Bitcoin
“Unprecedented” Google Cloud event wipes out customer account and its backups
What happened to OpenAI’s long-term AI risk team?

Thursday, May 16th

Flaw in Wi-Fi Standard Can Enable SSID Confusion Attacks
Linux maintainers were infected for 2 years by SSH-dwelling backdoor with huge reach
MIT students stole $25M in seconds by exploiting ETH blockchain bug
BreachForums, an online bazaar for stolen data, seized by FBI

Wednesday, May 15th

It’s the End of Google Search As We Know It
Google strikes back at OpenAI with “Project Astra” AI agent prototype

Tuesday, May 14th

Security researcher says PoC for kernel vulnerability targeting iOS 17.4.1 and older coming soon
Apple releases iOS 17.5, macOS 14.5, and other updates as new iPads launch
Disarmingly lifelike: ChatGPT-4o

Monday, May 13th

FBI To Charge Teenager Hackers From Scattered Spider Who Hacked Hundreds Of Organizations
JTAG Hacking An SSD With A Pi: A Primer
As of May 2024, Black Basta ransomware affiliates hacked over 500 organizations worldwide
North Korean hackers deploy ‘Durian’ malware, targeting crypto firms
Interview With the Russian-Military-Linked Hackers Targeting US Water Utilities
Google patches its fifth zero-day vulnerability of the year in Chrome
OpenAI revs up plans for web search, but denies report of an imminent launch

Friday, May 10th

Boeing Confirms Lockbit Hackers Wanted $200 Million Ransom After 2023 Hack
Dell discloses data breach of customers’ physical addresses
Poland says it was targeted by Russian military intelligence hackers
Leaked FBI email stresses need for warrantless surveillance of Americans
Stack Overflow users sabotage their posts after OpenAI deal
Fedora Asahi Remix 40 is another big step forward for Linux on Apple Silicon Macs
6 Practical Tips for Using Anthropic's Claude Chatbot

Thursday, May 9th

OpenAI Is ‘Exploring’ How to Responsibly Generate AI Porn
Dell responds to return-to-office resistance with VPN, badge tracking
Hands-on with the new iPad Pros and Airs: A surprisingly refreshing refresh

Wednesday, May 8th

Chinese Hackers Deployed Backdoor Quintet to Down MITRE
Apple announces M4 with more CPU cores and AI focus
Boeing says workers skipped required tests on 787 but recorded work as completed
Ransomware mastermind LockBitSupp has been ID’d