Update for iPhone and iPod touch [telecom]

Monty Solomon · 2010-08-12T12:13:13+00:00

APPLE-SA-2010-08-11-1 iOS 4.0.2 Update for iPhone and iPod touchiOS 4.0.2 Update for iPhone and iPod touch is now available andaddresses the following:FreeTypeCVE-ID: CVE-2010-1797Available for: iOS 2.0 through 4.0.1 for iPhone 3G and later,iOS 2.1 through 4.0 for iPod touch (2nd generation) and laterImpact: Viewing a PDF document with maliciously crafted embeddedfonts may allow arbitrary code executionDescription: A stack buffer overflow exists in FreeType's handlingof CFF opcodes. Viewing a PDF document with maliciously craftedembedded fonts may allow arbitrary code execution. This issue isaddressed through improved bounds checking.IOSurfaceCVE-ID: CVE-2010-2973Available for: iOS 2.0 through 4.0.1 for iPhone 3G and later,iOS 2.1 through 4.0 for iPod touch (2nd generation) and laterImpact: Malicious code running as the user may gain systemprivilegesDescription: An integer overflow exists in the handling of IOSurfaceproperties, which may allow malicious code running as the user togain system privileges. This issue is addressed through improvedbounds checking.Installation note:These updates are only available through iTunes, and will not appearin your computer's Software Update application, or in the AppleDownloads site. Make sure you have an Internet connection and haveinstalled the latest version of iTunes from iTunes will automatically check Apple's update server on its weeklyschedule. When an update is detected, it will download it. Whenthe iPhone or iPod touch is docked, iTunes will present the user withthe option to install the update. We recommend applying the updateimmediately if possible. Selecting Don't Install will present theoption the next time you connect your iPhone or iPod touch.The automatic update process may take up to a week depending on theday that iTunes checks for updates. You may manually obtain theupdate via the Check for Updates button within iTunes. After doingthis, the update can be applied when your iPhone or iPod touch isdocked...

Aug 12, 2010 1 Replies

Rate this thread:

Monty Solomon 15 years ago

Vote

John David Galt 15 years ago

This update disables the ability to jailbreak your iPhone using JailBreakMe.com, so if you want to do that, you shouldn't update.

Discussion of how the exploit works is at

formatting link

If you're really worried about people using this or other Adobe hacks to install malware on your system (which can also work on desktop PCs), tips for protecting yourself are at

formatting link

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required