APPLE-SA-2011-04-14-1 iOS 4.3.2 Software Update [telecom]

Monty Solomon · 2011-04-15T13:03:54+00:00

APPLE-SA-2011-04-14-1 iOS 4.3.2 Software UpdateiOS 4.3.2 Software Update is now available and addresses thefollowing:Certificate Trust PolicyAvailable for: iOS 3.0 through 4.3.1 for iPhone 3GS and later,iOS 3.1 through 4.3.1 for iPod touch (3rd generation) and later,iOS 3.2 through 4.3.1 for iPadImpact: An attacker with a privileged network position may interceptuser credentials or other sensitive informationDescription: Several fraudulent SSL certificates were issued by aComodo affiliate registration authority. This may allow a man-in-the-middle attacker to redirect connections and intercept usercredentials or other sensitive information. This issue is addressedby blacklisting the fraudulent certificates. Note: For Mac OS Xsystems, this issue is addressed with Security Update 2011-002. ForWindows systems, Safari relies on the certificate store of the hostoperating system to determine if an SSL server certificate istrustworthy. Applying the update described in Microsoft KnowledgeBase Article 2524375 will cause Safari to regard these certificatesas untrusted. The article is available atAvailable for: iOS 3.0 through 4.3.1 for iPhone 3GS and later,iOS 3.1 through 4.3.1 for iPod touch (3rd generation) and later,iOS 3.2 through 4.3.1 for iPadImpact: Visiting a maliciously crafted website may lead to thedisclosure of addresses on the heapDescription: libxslt's implementation of the generate-id() XPathfunction disclosed the address of a heap buffer. Visiting amaliciously crafted website may lead to the disclosure of addresseson the heap, which may aid in bypassing address space layoutrandomization protection. This issue is addressed by generating an IDbased on the difference between the addresses of two heap buffers.CVE-IDCVE-2011-0195 : Chris Evans of Google Chrome Security TeamQuickLookAvailable for: iOS 3.0 through 4.3.1 for iPhone 3GS and later,iOS 3.1 through 4.3.1 for iPod touch (3rd generation) and later,iOS 3.2 through 4.3.1 for iPadImpact: Viewing a...

Apr 15, 2011 0 Replies

Rate this thread:

Monty Solomon 15 years ago

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required