iPhone AT&T WiFi Settings Open to MiTM Attacks

A security researcher has discovered that any wireless network can pretend to be an AT&T Wi-Fi hot spot and thus lure unsuspecting iPhone users to an untrusted network connection. Read the full article. CNet...

Has Apple Gotten Religion on Software Security?

Information security is an unpredictable, fluid discipline. There are very few absolute truths, but for the last few years, one of those has been that Apple isn’t paying much attention to software security. At least that’s the received wisdom. This theory is based mainly on the fact that security...

Apple iPhone 3.1.2 (7D11) Model MB702LL Mobile Safari Denial-of-Service

No description provided by source. Apple iPhone 3.1.2 7D11 Model MB702LL Mobile Safari Denial-of-Service Author: Matthew Bergin Date: 4/19/10 Implications: Stack Exhaustion html body background =...

The iPad: As Insecure As The iPhone

Forbes reporter Andy Greenberg polled a group of security researchers about the security posture of Apple’s new iPad device and comes away with a simple conclusion: The iPad is just as insecure as the iPhone. Some quotes from the story: Aaron Portnoy, security researcher, Tipping Point: “It’s...

Apple iPhone 3.1.2 - 7D11 Model MB702LL Mobile Safari Denial of Service

Apple iPhone 3.1.2 - 7D11 Model MB702LL Mobile Safari Denial of Service Apple iPhone 3.1.2 7D11 Model MB702LL Mobile Safari Denial-of-Service Author: Matthew Bergin Date: 4/19/10 Implications: Stack Exhaustion body background =...

Apple iPhone 3.1.2 - '7D11' Model MB702LL Mobile Safari Denial of Service

Apple iPhone 3.1.2 7D11 Model MB702LL Mobile Safari Denial-of-Service Author: Matthew Bergin Date: 4/19/10 Implications: Stack Exhaustion body background = "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...

iPhone Unlock Utility Actually a DNS Trojan

An application that offers to unlock iPhones is actually designed to hijack internet connections on compromised Windows PCs, security watchers warn. Read the full article. The Register...

Apple Patches Pwn2Own Flaw That Hacked Safari

Apple today shipped a patch to fix the drive-by download vulnerability used by Charlie Miller left to hack a fully patched MacBook via the Safari browser. Miller’s hack was part of this year’s CanSecWest Pwn2Own contest where Apple’s flagship browser fell for the third straight year. In the attac...

iPhone Sandbox Model Not Enough

The iPhone sandbox has always been held up as a major roadblock to thwart hackers from doing damage on the device. But, as European researchers Vincenzo Iozzo and Ralf Philipp Weinmann proved, a hacker can hijack a lot of sensitive data without ever leaving the iPhone sandbox. In this case, they...

Google Chrome Survives: Most Secure? Nope

The only browser that survived Pwn2Own this year was Google Chrome. This led to numerous news reports like this one suggesting that Google’s browser was somehow more secure than the others. This is far from the truth. In fact, the vulnerability that caused the iPhone’s downfall was in the WebKit...

10 Lessons From The Pwn2Own Hacker Contest

The recent CanSecWest Pwn2Own contest saw successful hacking attacks against Microsoft Internet Explorer 8, Mozilla Firefox and Apple’s Safari and iPhone products. Now that the dust has settled and the vendors are starting to patch the vulnerabilities, Threatpost editor Ryan Naraine takes a look ...

CVE-2010-1226

The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service Safari, Mail, or Springboard crash via a crafted innerHTML property of a DIV element, related to a "malformed character" issue...

Design/Logic Flaw

The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service Safari, Mail, or Springboard crash via a crafted innerHTML property of a DIV element, related to a "malformed character" issue...

CVE-2010-1226

The CVE-2010-1226 issue affects Apple iPhone OS 3.1 (iPhone 2G) and 3.1.3 (iPhone 3GS). The vulnerability is in the HTTP client’s handling of innerHTML in a DIV element, related to a “malformed character” condition, which can allow remote attackers to cause a denial of service resulting in crashe...

CVE-2010-1226

The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service Safari, Mail, or Springboard crash via a crafted innerHTML property of a DIV element, related to a "malformed character" issue...

iPhone App Quip Has Photo Privacy Flaw

A security flaw within a popular photo sharing iPhone app known as Quip, has exposed thousands of shared photos, with repositories of them — including the naked ones — already circulating across the Web. Read the full article. ZDNet...

CVE-2010-1178

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash via a JavaScript loop that attempts to construct an infinitely long string...

Design/Logic Flaw

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long exception string in a throw statement, possibly a related issue to CVE-2009-1514...

Design/Logic Flaw

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash via a JavaScript loop that attempts to construct an infinitely long string...

Code injection

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long string in a MARQUEE element...