SigEx Telecom : Apple Heals Holes in iPhone, Mac OS, Safari by Delia Cruceru

At the Black Hat conference from Las Vegas, researchers from Independent Security Experts (ISE), planned to demonstrate iPhone vulnerabilities. Just before that, Apple released fixes for iPhone, Mac OS and Safari 3.03 browser beta. Vulnerabilities for iPhone included include cross-site scripting, unexpected application termination, spoofing or arbitrary code execution and involved components such as Safari, WebCore and WebKit. The version 1.0.1 update is only available by donwloading on iPhone through iTunes. "Before, we knew of two vulnerabilities, and they fixed five. I'm impressed with Apple to turn it around this quickly. If you think of the time needed to write the code and test it properly they did a good job turning it around in this short amount of time," said Amol Sarwate, research manager at vulnerability management company Qualys. Apple also released an update for Mac OS X 10.3 called "Panther," and 10.4 "Tiger, for fixing 45 bugs. Components of Mac OS X patched were CFNetwork, the Mac OS X library of network protocols; CoreAudio, the application programming interface that handles sound on Macs; the zgrep file-compression utility; iChat; and WebCore, the part of the WebKit application framework that handles HTML rendering. They released patches for Safari browser too: Safari 3.0.3 that fixes four flaws, two of which are vulnerabilities carried over from old code.

related story: http://www.internetnews.com/xSP/article.php/3692131

by Delia Cruceru for SigEx Telecom (http://sigex.com)

SigEx Telecom is quickly becoming the leading telebroadcasting communications provider allowing people to easily talk, view, upload and share video clips through free online TV broadcasting, free unlimited global calls, websites, blogs, video-mails and SMS. SigEx Telecom captures many add-on services for its clients generating royalties and fees in a broad spectrum of marketing services including public relations and promotions.