Apple's first security patches of 2008 fix iPhone, QuickTime
629732
Apple has released its first security updates of the new year, fixing bugs in its QuickTime media player and iPhone and iPod touch devices.As with previous updates, the iPhone 1.1.3 software patch sent those who had installed the unauthorized Jailbreak software -- used to run third-party applications on the iPhone -- scrambling to get their phones up and running. That&#39;s because Apple&#39;s updates have so far always rendered Jailbreak unusable, forcing users to go through a complex re-installation process.According to the Unofficial Apple Weblog, it is possible to run third-party software following this latest update, but the process is complex. A simpler Jailbreak 1.1.3 script is expected to be posted eventually at the iPhone Wiki, which is the hub of much iPhone hacking.The iPhone update fixes two flaws in the Safari browser, including a critical bug that could be exploited to run unauthorized software on the device. A third bug could let an unauthorized user bypass Passcode Lock and launch iPhone applications. The iPod touch is susceptible to the Safari bugs, Apple said.These updates will be rolled out to customers over the next week via the devices&#39; iTunes update mechanism.The QuickTime 7.4 update fixes four critical flaws in the software that could be exploited by attackers to crash the media player or even run unauthorized software on a victim&#39;s computer. The update is available for both the Windows and Mac OS X operating systems.However, the software does not fix a serious flaw in the player that was disclosed over the weekend.Security experts are particularly concerned over this flaw because attack code showing how it can be exploited has also been published. Apple is still working to fix the vulnerability, which has to do with QuickTime&#39;s use of the Real-Time Streaming Protocol.
320036
(InfoWorld) - Three security researchers claimed Sunday that they have found the first exploitable vulnerability in Apple's iPhone, a flaw that allows them to steal any data from the device or even to turn it into a remote surveillance tool. The trio -- Charles Miller, formerly with the National Security Agency; Jake Honoroff; and Joshua Mason of Baltimore-based Independent Security Evaluators (ISE) -- have notified Apple of the vulnerability and given the company less than two weeks to fix the bug before Miller presents more information at the Black Hat conference on Aug. 2. According to a paper posted by the three, they rooted out a vulnerability in the iPhone's version of Safari using "fuzzing" tools and wrote a proof-of-concept exploit that can be delivered from a malicious Web site or using "man in the middle" tactics to trick users into connecting to a malicious wireless access point. Once the exploit runs, it's essentially game over, the researchers said: The iPhone is owned. "In our proof of concept, this code reads the log of SMS messages, the address book, the call history, and the voicemail data," the researchers wrote on the ISE site. "It then transmits all this information to the attacker." But wait -- there's more! That, however, could be just the beginning. The researchers claimed that a second exploit actually operated the iPhone remotely once the device was hijacked. "When we viewed a second HTML page in our iPhone, it ran the second exploit payload which forced [the iPhone] to make a system sound and vibrate for a second," they said in the paper. "Alternately, by using other API functions we discovered, the exploit could have dialed phone numbers, sent text messages, or recorded audio (as a bugging device) and transmitted it over the network for later collection by a malicious party." The vulnerability was reported to Apple last Tuesday, July 17. "We proposed a fix Apple could include in a future iPhone update," the researchers said, "but we don't know if they plan to do so. They responded and are looking into it." In an e-mail late Sunday night, Apple spokeswoman Lynn Fox would only say: "Apple takes security very seriously and has a great track record of addressing potential vulnerabilities before they can affect users. We're looking into the report submitted by I.S.E. and always welcome feedback on how to improve our security." She declined to answer questions about the Aug. 2 deadline, whether Apple would issue a patch before then, or what the company thought of the way the trio disclosed the vulnerability. Miller will provide more information on the vulnerability and exploit at the upcoming Black Hat 2007 security conference, which opens next Saturday, July 28, in Las Vegas. But is this the ethical way? ISE's president, Avi Rubin, defended the decision to announce the existence of the vulnerability prior to a patch being made available by Apple. "Why are we doing that? Well, I believe that there is a social responsibility to report it when a device is vulnerable to attackers," said Rubin on his own blog Sunday. "People buy these things and use them in ways that put their identity and their online accounts at risk, and by exposing these vulnerabilities, we can make users better judges of how to use their high-tech devices." Rubin is familiar to many security observers from his research into problems with electronic voting systems. The paper by Miller, Honoroff, and Mason also spelled out a number of weaknesses in the iPhone's security architecture, although it didn't specifically pin the vulnerability on any of those flaws. One, however, most likely contributed to the reach of the exploit. "There are serious problems with the design and implementation of security on the iPhone," the paper said. "The most glaring is that all processes of interest run with administrative privileges. This implies that a compromise of any application gives an attacker full access to the device." Other deficiencies the trio cited in the iPhone's operating system included not using address randomization -- a technique applied by Windows Vista that's designed to make it tougher for hackers to write reliable attack code -- and allowing code in the heap to execute. Those last two shortcomings have been criticized in the desktop version of Mac OS X for some time. Three months ago, during the fallout after a hacking contest that jacked a MacBook Pro notebook, HD Moore -- the vulnerability researcher noted for the Metasploit hacking and attack testing software -- took on the claim that Mac OS X is safer than Windows. "The Mac OS X platform is years behind Linux, Windows, and OpenBSD in terms of operating-system security," said Moore then. "All of the above platforms support some form of address randomization (ASLR) and include features that make exploitation slightly more difficult." The ISE researchers have also posted a short video of their hack in action on YouTube.
569222
TechWeb - The vulnerability affects both Windows and Mac OS X versions of Apple's QuickTime software.
322939
Blog: iPhone Camera Roll Bugs, Picture Quality, Lifestyle
764564
Apple today released updates for its digital jukebox software iTunes, as well as an update for QuickTime.
608293
There is no need for serious alarm, but the exploit does appear to have been crafted before Apple Computer patched the flaw last week.
717783
InfoWorld - Apple has released a new security patch for QuickTime, its eighth update this year for the media player software.
504627
The company warns of serious vulnerabilities in its IOS software, releases update.
336518
Mac OS X 10.4.8 fixes several flaws that could lead to remote code execution, the company says.
344346
A critical bug in the way the Firefox browser works with QuickTime media files is now fixed in today's update.
247413
OS security fix is being rolled out to users who have enabled Automatic Updates.
573469
MacCentral - Apple on Monday released Security Update 2004-09-30, which fixes two AFP Server and CUPS issues as well as problems with NetInfoManager, postfix and the ServerAdmin component in Mac OS X Server v10.2.8 and v10.3.5. In addition, a QuickTime heap buffer overflow problem that could allow someone to execute code hidden in a BMP has been repaired. The CUPS and QuickTime fixes apply to Mac OS X v10.3.5 and v10.2.8 as well as the Server versions of each while the others apply only to the user and Server editions of v10.3.5.
11788
The Mac maker patches a bushel of security issues in its flagship operating system, some of which are considered "critical."
335116
If you hacked your iPhone to run it on a network other than AT&T's, the next iPhone software update could leave you with an iBrick, Apple said Monday.
690423
A new security update is available for Mac OS X users running the program that's part of iLife 08.
8577
(InfoWorld) - A hacker group released a free, open source unlock for Apple's iPhone late Tuesday, just a day after a commercial company started selling something similar for as much as $99 through a network of online resellers. The iPhone Dev Team, a dozen programmers who began their attempts to break the iPhone's reliance on AT&T in early July, have posted their hack on download servers. According to several sites, including Gizmodo and Engadget, the iPhone Dev Team unlock exploits the same iPhone bug as the for-money iPhoneSIMFree hack to do its magic. The two groups, however, came up with their solutions independently. But the process isn't for the faint of heart. "This unlock is not for everybody!" the iPhone Dev Team warned. The procedure involves several separate programs -- some of which must be obtained elsewhere on the Internet -- and requires that iPhone owners execute commands from a shell screen on the Mac or PC. Even so, reports have been posted to the team's site from users in more than 40 countries that the unlock hack works, and after a swap of the iPhone's included SIM card with one from another cellular service provider, that they've been able to access more than 90 different carriers. The iPhone's distinctive Visual Voicemail, which lets users select voice-mail messages rather than listen to them in the order they were received, is missing after an unlock; that feature relies on AT&T's back end. Some users have also reported that the iPhone's connection to YouTube no longer works after the hack is applied. The iPhone Dev Team is already working on a one-click tool sporting a graphical interface that will unlock an iPhone, but it had not been released as of this morning. "A new version of the GUI tool is almost complete," the group said on its site. It's likely, however, that any unlock will be undone by the next iPhone update, which Apple has said will be issued sometime this month to give the device new capabilities, such as Wi-Fi downloading from iTunes. The iPhoneSIMFree group, for example, has hammered the caveat into potential buyers' heads: "We cannot offer any guarantee should Apple Inc. choose to re-lock the phone after a future update," it stated in a FAQ. Resellers of the iPhoneSIMFree hack, who have priced the unlock as low as $45, have repeated the no-guarantee mantra. Apple has repeatedly refused to comment on the various iPhone unlock hacks -- paid versions or free ones.
230996
Blog: Microsoft revises one of its critical security bulletins from patch Tuesday, now including a fix for Microsoft Office 2004 for the Mac.