Thursday, 17 May 2012
Apple iOS update addresses PDF vulnerability
Apple iOS update addresses PDF vulnerability
By Bob Brown, Network World (US) | Jul 20, 2011
0 comments
Digg
PrintApple Friday issued a software security update designed to fix a Safari PDF rendering system vulnerability exploited by jailbreakers and that could have been used by hackers to infect Apple’s mobile devices, including iPhone 4 and iPad 2.
The flaw was made known last week.
In issuing the iOS 4.3.4 software update Apple said that the security flaws could have resulted in “an unexpected application termination or arbitrary code execution” and “malicious code running as the user to gain system privileges.” (Version 4.2.9 is the update for Verizon iPhones.)
Given that Apple has sold some 25 million iPads since the product debuted last year and has sold 18 million-plus iPhones during the first three months of this year, such a security issue could affect many customers indeed.
The AppAdvice website warned jailbreakers, those who dive into the innards of their Apple devices much to Apple’s dismay, not to download the update if they want to continue using the JailbreakMe.com 3.0 PDF exploit. JailbreakMe exploits have been around for a couple of years, forcing Apple to play a game of cat and mouse.
Similar
Add comment
knowledge_central_tab
Knowledge Central
Trusted Mobility Index
The mobile ecosystem of devices, services and networks is at a critical inflection point.While the mobile revolution is unleashing massive opportunities in both emerging and mature economies, it is also increasing in complexity and confusion. The reality is the lightning-fast adoption of powerful, smart devices is outpacing society’s ability to secure them. Today, trust in mobility hangs in the balance.
The state of the Internet, Q4, 2011
Geography appears to play a role in frequency of observed attacks on specific ports. For example, Port 23 (Telnet) is a favorite target for attacks observed to be originating from South Korea and Turkey, where it accounted for more than five times the number of attacks targeting the next most popular port (445 in both countries). Other instances of geography-based port targeting include observed attacks centered on Port 1433 (Microsoft SQL Server) in China and on Port 80 (WWW/HTTP) in Indonesia.
HID Global deploys a centralized, web-based IP access control solution at Fuxi Power Plant
Unable to meet the needs for real-time monitoring with its traditional patrol system, China's Fuxi Power Plant has deployed HID Global's VertX V2000.
StubHub: How to spot fraud before it happens
Whenever a list of log-on credentials is dumped onto the Web, retailers get hit with waves of automated attacks. Here's how ticket marketplace StubHub fights the threat.
