APPLE-SA-2009-07-31-1 iPhone OS 3.0.1

Monty Solomon · 2009-08-01T14:27:18+00:00

APPLE-SA-2009-07-31-1 iPhone OS 3.0.1iPhone OS 3.0.1 is now available and addresses the following:CoreTelephonyCVE-ID: CVE-2009-2204Available for: iPhone OS 1.0 through iPhone OS 3.0Impact: Receiving a maliciously crafted SMS message may lead to anunexpected service interruption or arbitrary code executionDescription: A memory corruption issue exists in the decoding of SMSmessages. Receiving a maliciously crafted SMS message may lead to anunexpected service interruption or arbitrary code execution. Thisupdate addresses the issue through improved error handling. Credit toCharlie Miller of Independent Security Evaluators, and CollinMulliner of Fraunhofer SIT for reporting this issue.Installation note:This update is only available through iTunes, and will not appear inyour computer's Software Update application, or in the AppleDownloads site. Make sure you have an internet connection and haveinstalled the latest version of iTunes from iTunes will automatically check Apple's update server on its weeklyschedule. When an update is detected, it will download it. When theiPhone is docked, iTunes will present the user with the option toinstall the update. We recommend applying the update immediately ifpossible. Selecting "don't install" will present the option the nexttime you connect your iPhone.The automatic update process may take up to a week depending on theday that iTunes checks for updates. You may manually obtain theupdate via the "Check for Update" button within iTunes. After doingthis, the update can be applied when your iPhone is docked to yourcomputer.To check that the iPhone has been updated:* Navigate to Settings* Select General* Select About. The version after applying this update will be"3.0.1 (7A400)" or laterInformation will also be posted to the Apple Security Updatesweb site: message is signed with Apple's Product Security PGP key,and details are available at:

Aug 01, 2009 0 Replies

Rate this thread:

Monty Solomon 16 years ago

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required