Published: 2008-07-14
Apple released a major upgrade for its iPhone and iPod Touch on Friday, closing thirteen security holes in the devices' operating systems and applications.
The update, which upgrades the devices to version 2.0, came the same day that the company released its next-generation mobile device, adding faster third-generation (3G) wireless service, integrated global positioning system (GPS) capabilities and more storage space. The software update for older iPhones and iPod Touch devices adds the ability to download applications and games to the devices, but also closes thirteen security holes, according to an advisory posted to the company's Web site.
The flaws expose iPhone and iPod Touch users to a variety of spoofing attacks that could aid phishers and include eight vulnerabilities in the mobile version of Apple's Safari Web browser, the most serious of which could allow an attacker to run code on the devices. Many of the flaws were fixed in Apple's desktop operating system, Mac OS X, as far back as four months ago.
The software upgrade is the second time this year that Apple has updated the iPhone to patch security issues. In January, the company closed three flaws when it also added location-finding features to the older iPhones, which do not include GPS technology. The previous October, the company fixed ten flaws in the iPhone and made changes that locked up phones, if the firmware had been hacked.
The latest update can take up to an hour and is available through iTunes synchronization feature.
If you have tips or insights on this topic, please contact SecurityFocus.
Posted by: Robert Lemos
