New iPhone and iPod touch Safari exploit discovered

Filed under:

It’s difficult to tell if this is just a little fear-mongering, or cause for real concern, but it looks like there’s another iPhone / touch exploit out there lurking on the unseen horizons of those device’s browsers. According to reports, a memory exploit — similar to the previously-patched TIFF exploit — has been discovered which affects units with firmware 1.0.2 all the way up to 1.1.3, thus carrying over to new 16GB iPhones and 32GB touches. Apparently, all you have to do is browse over to a site containing the malicious code, and it triggers a memory-exhausting script which causes the phone or iPod to crash. At this point, it doesn’t appear to be anything more than a nuisance which can be easily circumvented by disabling JavaScript for Safari, though that hardly qualifies as a fix. To date, Apple hasn’t issued a patch for the problem, but keep in mind it’s only been a known issue since January 24th.

[Via iPhone World]

 

Read | Permalink | Email this | Comments