Security Information and Review

Collection of security information and review

iPhone and iPod : Full feature and multiple vulnerabilities

Author : Admin

iPhone is a device designed and marketed by Apple Inc. It’s an internet-connected and multimedia smartphone with minimal hardware interface such keyboard but use touch screen to renders a virtual keyboard. iPhone is full feature smartphone, as a camera phone, a portable media player and can be an internet client with application like e-mail, web browsing and WIFI connectivity.


iPod was first launched on October 23, 2001, a brand of a portable media players designed and marketed by Apple Inc. Latest generation of the iPod use touchscreen technology was called iPod Touch, can play several audio file formats including MP3, AAC/M4A, WAV, Apple Lossless and other audio formats. The iPod Photo introduced the ability to display JPEG, BMP, GIF, TIFF and PNG image file formats.


iPhone and iPod touch use Apple iPhone OS to operate this device and multiple vulnerabilities have indentified which could be exploited by attackers to bypass security restrictions, gain knowledge of sensitive information, cause a denial of service or compromise vulnerable system. Vulnerabilities was reported by the vendor and others organization like secunia, Google Inc, affected Apple iPhone and iPod touch prior to version 3.0.


One of vulnerabilities is CoreGraphics, impact of this vulnerability : Viewing a maliciously crafted image and pdf file may lead to an unexpected application termination or arbitrary code execution and multiple vulnerabilities in FreeType v2.3.8.


Other vulnerability is Exchange feature, Apple iPhone and iPod touch are prone to an information-disclosure vulnerability. Successfully exploiting this issue may allow an attacker to perform man-in-the-middle attacks by impersonating a trusted Exchange server. This may allow the attacker to obtain credentials or other sensitive information or give users a false sense of security. Information harvested may aid in further attacks.


Solution for this vulnerability,  upgrade Operating System to Apple iPhone OS v3.0. The vendor has released an advisory and fixes.

Share and Enjoy: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • Netvouz
  • DZone
  • ThisNext
  • MisterWong
  • Wists
  • Technorati
  • YahooMyWeb
  • Slashdot
  • StumbleUpon
Categories: device security
If you like this posts, please leave messages / comments.