Apple quickly confirmed the bug and patched it a month later. In August 2008, a researcher discovered a bug that allowed users to bypass a password-protected lock had resurfaced in iPhone 2.0. Other vulnerabilities had the potential to expose an iPhone owner's Microsoft Exchange e-mail account, let unauthorized people access deleted e-mails or a supposedly-locked iPhone, or disclose sensitive information on the smartphone.Īpple has had problems with the iPhone's password-locking feature before. Four of the 10 vulnerabilities involved WebKit. Of the two critical flaws, the first could be triggered by rigged audio files, while the second could be exploited through a malicious Web site designed to leverage a bug in WebKit, the rendering engine that powers the iPhone's Safari browser. Although Apple doesn't rank or score flaws like other vendors, it uses the phrasing 'arbitrary code execution' to denote vulnerabilities that could be used by attackers to gain complete control of the iPhone. Only two of the 10 vulnerabilities Apple patched with iPhone 3.1 were classified as critical. At the Black Hat presentation Miller and Mulliner gave in July, Miller said he thought there were more SMS bugs to be found in the iPhone the pair had been able to test only a small subset of the possible scenarios.

Quicktime download 7.6 4