Focus on Apple
Apple releases iPhone v1.0.1 Update Aug 01 2007 12:37AM
Todd Woodward (todd_woodward symantec com)
Apple today released APPLE-SA-2007-07-31 iPhone v1.0.1 Update.

As usual, here is the direct link to the Apple Knowledge Base article which has more detail:

http://docs.info.apple.com/article.html?artnum=306173

In summary, there are two Safari, one WebCore and two WebKit security updates.

* Prevents cookies and pages from being "arbitrarily" modified.
* Resolves a heap buffer overflow in the PCRE library used by the JavaScript engine in Safari.
* Prevents an HTTP injection issue.
* Prevents spoofing through improve domain name validity checking.
* Prevents application termination or arbitrary code execution.

Security Response Researcher
Focus-Apple Moderator
 
________________________________________
Todd D. Woodward
Technical Support Engineer
NetBackup Support
Symantec Corporation
www.symantec.com
________________________________________
Office: 541-335-7441
________________________________________

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus