APPLE-SA-2008-07-11 iPhone 2.0 and iPod touch 2.0

Monty Solomon · 2008-07-11T20:34:30+00:00

APPLE-SA-2008-07-11 iPhone 2.0 and iPod touch 2.0iPhone 2.0 and iPod touch 2.0 are now available and address thefollowing issues:CFNetworkCVE-ID: CVE-2008-0050Available for: iPhone v1.0 through v1.1.4,iPod touch v1.1 through v1.1.4Impact: A malicious proxy server may spoof secure websitesDescription: A malicious HTTPS proxy server may return arbitrarydata to CFNetwork in a 502 Bad Gateway error, which could allow asecure website to be spoofed. This update addresses the issue by notreturning the proxy-supplied data on an error condition.KernelCVE-ID: CVE-2008-0177Available for: iPhone v1.0 through v1.1.4,iPod touch v1.1 through v1.1.4Impact: A remote attacker may be able to cause an unexpected deviceresetDescription: An undetected failure condition exists in the handlingof packets with an IPComp header. Sending a maliciously craftedpacket to a system configured to use IPSec or IPv6 may cause anunexpected device reset. This update addresses the issue by properlydetecting the failure condition.SafariCVE-ID: CVE-2008-1588Available for: iPhone v1.0 through v1.1.4,iPod touch v1.1 through v1.1.4Impact: Unicode ideographic spaces may be used to spoof a websiteDescription: When Safari displays the current URL in the addressbar, Unicode ideographic spaces are rendered. This allows amaliciously crafted website to direct the user to a spoofed site thatvisually appears to be a legitimate domain. This update addresses theissue by not rendering Unicode ideographic spaces in the address bar.SafariCVE-ID: CVE-2008-1589Available for: iPhone v1.0 through v1.1.4,iPod touch v1.1 through v1.1.4Impact: Visiting a maliciously crafted website may lead to thedisclosure of sensitive informationDescription: When Safari accesses a website that uses a self-signedor invalid certificate, it prompts the user to accept or reject thecertificate. If the user presses the menu button while at the prompt,then on the next visit to the site, the certificate is accepted withno prompt. This...

Jul 11, 2008 0 Replies

Rate this thread:

Monty Solomon 18 years ago

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required